Skip to content

UID2-8231: Bump Temurin base image to drop distrusted root CAs - #684

Merged
cYKatherine merged 1 commit into
mainfrom
kcc-UID2-8231-bump-temurin-base
Nov 2, 2026
Merged

cYKatherine merged 1 commit into
mainfrom
kcc-UID2-8231-bump-temurin-base

Conversation

@cYKatherine

Copy link
Copy Markdown
Contributor

Bumps the base image to eclipse-temurin:21.0.13_9-jre-alpine-3.23. Its OS CA bundle (ca-certificates-20261020) and JDK cacerts no longer include the distrusted emSign ECC Root CA - G3 and AAA Certificate Services roots, which the previous base still trusted.

  • Alpine stays on 3.23, so this is a JDK patch (to 21.0.13) plus a CA bundle update, not an OS upgrade.
  • Same change as uid2-operator#2810.

🤖 Generated with Claude Code

Move to eclipse-temurin 21.0.13_9-jre-alpine-3.23. Its OS CA bundle
(ca-certificates-20261020) and JDK cacerts no longer include emSign ECC
Root CA - G3 or AAA Certificate Services.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Ticket: UID2-8231
Branch: kcc-UID2-8231-bump-temurin-base
@cYKatherine
cYKatherine merged commit 4e71da6 into main Nov 2, 2026
5 checks passed
@cYKatherine
cYKatherine deleted the kcc-UID2-8231-bump-temurin-base branch November 2, 2026 23:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants