feat(spring): support Key Vault certificate alias filters 6x - #50051
Closed
Arnab Nandy (arnabnandy7) wants to merge 1 commit into
Closed
Conversation
Signed-off-by: Arnab Nandy <arnab_nandy7@yahoo.com>
Arnab Nandy (arnabnandy7)
requested review from
a team,
Arthur Ma (ArthurMa1978),
Jonathan Giles (JonathanGiles),
Xiaofei Cao (XiaofeiCao),
browndav-msft,
Ken Chen (chenkennt),
Vinay Gera (g2vinay),
gunjansingh-msft,
Haoling Dong (haolingdong-msft),
Jair Myree (jairmyree),
Josh Free (joshfree),
Mike Harder (mikeharder),
Moary Chen (moarychan),
Rujun Chen (rujche),
Sameeksha Vaity (samvaity),
Xiaolu Dai (saragluna),
vcolin7,
Liangying.Wei (vicancy),
Weidong Xu (weidongxu-microsoft) and
Chenyang Liu (zackliu)
as code owners
August 6, 2026 08:46
Arnab Nandy (arnabnandy7)
requested review from
a team,
Aashish93-stack,
Harshan B (Harshan01),
Josue Gomez (SwayGom),
Abhinav Ghai (abhinav-ghai),
Abhipsa Misra (abhipsaMisra),
alexathomases,
Andy (andyk-ms),
brycewang-microsoft,
Darren Cohen (dargilco),
Paymaun (digimaun),
Harsimar Kaur (harsimar),
John Gallardo (johngallardo),
Mitesh Shah (mitsha-microsoft),
Pratibha Venkatachalam (prativen),
Rajkumar Rangaraj (rajkumar-rangaraj),
Ram Thiru (ramthi),
Ryan Hurey (rhurey),
Sagar Patel (sagar0207),
Sebastian Herzig-Patel (sjiherzig),
Tim Taylor (timtay-microsoft),
Trask Stalnaker (trask) and
xiang17
as code owners
August 6, 2026 08:46
Contributor
|
Thank you for your contribution Arnab Nandy (@arnabnandy7)! We will review the pull request and get back to you soon. |
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds Spring configuration support for filtering the certificate aliases loaded by the Azure Key Vault JCA provider.
Applications can now configure alias filter patterns independently for an SSL bundle's keystore and truststore:
spring.ssl.bundle.keyvault.<bundle-name>.keystore.certificate-alias-filter-patternsspring.ssl.bundle.keyvault.<bundle-name>.truststore.certificate-alias-filter-patternsThe configured list is passed to the JCA provider through the
azure.keyvault.jca.certificate-alias-filter-patternssystem property. Include patterns are regular expressions, while exclusion patterns use the!prefix. When the list is empty, all certificate aliases continue to be loaded, preserving the existing behavior.The JCA system property is cleared between keystore and truststore initialization to prevent filter settings from leaking between SSL bundles or stores.
This change also:
Resolves #50013.
Depends on #49774, which adds the corresponding certificate alias filtering support to
azure-security-keyvault-jca.The focused tests are:
All SDK Contribution checklist:
General Guidelines and Best Practices
Testing Guidelines