Skip to content

docs: Document automatic DevWorkspace Operator TLS certificate configuration#3128

Draft
tolusha wants to merge 1 commit into
eclipse-che:mainfrom
tolusha:update-tls-certificates-dwo-config
Draft

docs: Document automatic DevWorkspace Operator TLS certificate configuration#3128
tolusha wants to merge 1 commit into
eclipse-che:mainfrom
tolusha:update-tls-certificates-dwo-config

Conversation

@tolusha

@tolusha tolusha commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

What does this pull request change?

Updates the "Importing untrusted TLS certificates" article to document that the Che operator automatically configures the DevWorkspace Operator to trust imported certificates. When certificates are imported via labeled ConfigMaps, the Che operator now automatically sets the tlsCertificateConfigmapRef field in the DevWorkspace Operator routing configuration to reference the ca-certs-merged ConfigMap. This enables the DevWorkspace Operator to resolve parent devfile references via URI that use untrusted TLS certificates.

Changes made:

  • Added parent devfile URI with untrusted TLS to the list of external services requiring certificate import
  • Added explanation of automatic DevWorkspace Operator configuration
  • Added verification step to check the DevWorkspace Operator configuration

Source PR: eclipse-che/che-operator#2137

What issues does this pull request fix or reference?

Specify the version of the product this pull request applies to

next

Pull Request checklist

The author and the reviewers validate the content of this pull request with the following checklist, in addition to the automated tests.

  • Any procedure:
    • Successfully tested.
  • Any page or link rename:
    • The page contains a redirection for the previous URL.
    • Propagate the URL change in:
  • Builds on Eclipse Che hosted by Red Hat.
  • the Validate language on files added or modified step reports no vale warnings.

…uration

Update the importing-untrusted-tls-certificates article to document that the
Che operator automatically configures the DevWorkspace Operator to trust
imported certificates by setting tlsCertificateConfigmapRef in the DWO routing
configuration. This enables DevWorkspace Operator to resolve parent devfile
references via URI with untrusted TLS certificates.

Changes:
- Add parent devfile URI with untrusted TLS to the list of external services
- Document automatic DevWorkspace Operator configuration
- Add verification step to check DWO configuration

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
@github-actions

github-actions Bot commented Jun 18, 2026

Copy link
Copy Markdown

Click here to review and test in web IDE: Contribute

@github-actions

github-actions Bot commented Jun 18, 2026

Copy link
Copy Markdown

🎊 Navigate the preview: https://6a33f22f78fb3600c4765bf0--eclipse-che-docs-pr.netlify.app 🎊

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant