Skip to content

fix: fix generating SNIs in dbless#7853

Merged
pmalek merged 4 commits intomainfrom
fix-sni-in-dbless
Mar 11, 2026
Merged

fix: fix generating SNIs in dbless#7853
pmalek merged 4 commits intomainfrom
fix-sni-in-dbless

Conversation

@pmalek
Copy link
Copy Markdown
Member

@pmalek pmalek commented Mar 4, 2026

What this PR does / why we need it:

This PR handles the differences in generating Kong SNIs based on whether KIC is running dbless or db backed.

Which issue this PR fixes:

Fixes #7831

Special notes for your reviewer:

PR Readiness Checklist:

Complete these before marking the PR as ready to review:

  • the CHANGELOG.md release notes have been updated to reflect any significant (and particularly user-facing) changes introduced by this PR

@pmalek pmalek self-assigned this Mar 4, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.7%. Comparing base (c0b4315) to head (247aeb9).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##            main   #7853     +/-   ##
=======================================
- Coverage   78.3%   77.7%   -0.6%     
=======================================
  Files        222     222             
  Lines      20786   20969    +183     
=======================================
+ Hits       16283   16309     +26     
- Misses      3472    3621    +149     
- Partials    1031    1039      +8     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@pmalek pmalek merged commit 18c1423 into main Mar 11, 2026
78 of 81 checks passed
@pmalek pmalek deleted the fix-sni-in-dbless branch March 11, 2026 15:00
pmalek added a commit that referenced this pull request Mar 11, 2026
* fix: fix generating SNIs in dbless

* tests: fix golden tests files

* tests: fix golden tests files

* chore: add changelog
pmalek added a commit that referenced this pull request Mar 11, 2026
* fix: fix generating SNIs in dbless

* tests: fix golden tests files

* tests: fix golden tests files

* chore: add changelog
programmer04 pushed a commit that referenced this pull request Mar 13, 2026
* fix: fix generating SNIs in dbless (#7853)

* fix: fix generating SNIs in dbless

* tests: fix golden tests files

* tests: fix golden tests files

* chore: add changelog

* chore: update kong-ee test dependency to 3.10.0.9
programmer04 pushed a commit that referenced this pull request Mar 13, 2026
* fix: fix generating SNIs in dbless (#7853)

* fix: fix generating SNIs in dbless

* tests: fix golden tests files

* tests: fix golden tests files

* chore: add changelog

* chore: update kong-ee test dependency to 3.10.0.9
Copilot AI added a commit that referenced this pull request Mar 28, 2026
…ess mode

The !inmemory guard introduced by PR #7853 (fixing KIC issue #7831) caused
a regression reported in issue #7869: Kong OSS 3.9 rejects configs without
cert back-references on SNIs when consumer credentials are also present.

The 'value must be null' error in #7831 was specific to Kong Enterprise
3.9.0.1 and was fixed in Kong 3.9.1.0. The repro script confirms that
3.9.1.0 both accepts and requires cert back-references in complex configs.

Fix: remove the inmemory gate so GetFCertificateFromKongCert always sets
Certificate.ID on each nested SNI when the cert has an ID. Also remove the
now-unused inmemory parameter from GetFCertificateFromKongCert,
getCertsSNIs, and GenerateDeckContentParams.InMemory. Update affected unit
tests and regenerate all golden files.

Agent-Logs-Url: https://github.com/Kong/kubernetes-ingress-controller/sessions/03738126-ac54-4dcf-bb35-f77aa9b7dfc3

Co-authored-by: pmalek <739996+pmalek@users.noreply.github.com>
pmalek added a commit that referenced this pull request Mar 31, 2026
pmalek added a commit that referenced this pull request Mar 31, 2026
team-k8s-bot pushed a commit that referenced this pull request Mar 31, 2026
This reverts commit 18c1423.

(cherry picked from commit a5878ae)
pmalek added a commit that referenced this pull request Mar 31, 2026
This reverts commit 18c1423.

(cherry picked from commit a5878ae)
pmalek added a commit that referenced this pull request Mar 31, 2026
This reverts commit 18c1423.

(cherry picked from commit a5878ae)

Co-authored-by: Patryk Małek <pmalek@users.noreply.github.com>
pmalek added a commit that referenced this pull request Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

KIC 3.4.0+ sets certificate foreign key on nested SNIs causing "value must be null" rejection in DB-less mode

2 participants