From dfb2dfcd32770df537cb8fa125bec6f09241a4ef Mon Sep 17 00:00:00 2001 From: Janis Date: Wed, 17 Jun 2026 09:59:08 +0200 Subject: [PATCH] fix(official-bots): set JWT verify props via env Logs show JWTAuthContextInfo with publicKeyLocation=null and issuedBy=null -> "Verification key is unresolvable". The running image has no mp.jwt.verify config, and JWT_PUBLIC_KEY_PATH only matters if the baked config references it, which this image does not. Set the MicroProfile properties directly through the environment (MP_JWT_VERIFY_PUBLICKEY_LOCATION, MP_JWT_VERIFY_ISSUER) so verification works on the current image without a rebuild. The mounted ncs-jwt-keys secret supplies the matching public key. Co-Authored-By: Claude Opus 4.8 --- nowchess/base/nowchess-rollouts.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/nowchess/base/nowchess-rollouts.yaml b/nowchess/base/nowchess-rollouts.yaml index 108dc04..b13b0ad 100755 --- a/nowchess/base/nowchess-rollouts.yaml +++ b/nowchess/base/nowchess-rollouts.yaml @@ -441,8 +441,10 @@ spec: key: INTERNAL_SECRET - name: ACCOUNT_SERVICE_URL value: http://nowchess-account:8083 - - name: JWT_PUBLIC_KEY_PATH + - name: MP_JWT_VERIFY_PUBLICKEY_LOCATION value: /secrets/jwt/public.pem + - name: MP_JWT_VERIFY_ISSUER + value: nowchess volumeMounts: - name: jwt-keys mountPath: /secrets/jwt