feat(spring): support Key Vault certificate alias filters 6x - #50052
Open
Arnab Nandy (arnabnandy7) wants to merge 1 commit into
Conversation
Signed-off-by: Arnab Nandy <arnab_nandy7@yahoo.com>
Arnab Nandy (arnabnandy7)
requested review from
a team,
Moary Chen (moarychan),
Rujun Chen (rujche) and
Xiaolu Dai (saragluna)
as code owners
August 6, 2026 09:18
|
Azure Pipelines: Successfully started running 3 pipeline(s). 31 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
6 tasks
Contributor
|
Thank you for your contribution Arnab Nandy (@arnabnandy7)! We will review the pull request and get back to you soon. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds Spring configuration support for filtering the certificate aliases loaded by the Azure Key Vault JCA provider.
Applications can now configure alias filter patterns independently for an SSL bundle's keystore and truststore:
spring.ssl.bundle.keyvault.<bundle-name>.keystore.certificate-alias-filter-patternsspring.ssl.bundle.keyvault.<bundle-name>.truststore.certificate-alias-filter-patternsThe configured list is passed to the JCA provider through the
azure.keyvault.jca.certificate-alias-filter-patternssystem property. Include patterns are regular expressions, while exclusion patterns use the!prefix. When the list is empty, all certificate aliases continue to be loaded, preserving the existing behavior.The JCA system property is cleared between keystore and truststore initialization to prevent filter settings from leaking between SSL bundles or stores.
This change also:
Resolves #50013.
Depends on #49774, which adds the corresponding certificate alias filtering support to
azure-security-keyvault-jca.The focused tests are:
All SDK Contribution checklist:
General Guidelines and Best Practices
Testing Guidelines