Knative SSL Handshake error

[danielguinan1]

When setting the flag createKnativeService: true on a microservice I hit this error when attempting to reach it.

[5/13/22 14:58:13:461 UTC] 0000002f com.ibm.ws.kernel.feature.internal.FeatureManager A CWWKF0011I: The defaultServer server is ready to run a smarter planet. The defaultServer server started in 5.174 seconds.
[5/13/22 14:58:13:681 UTC] 00000045 com.ibm.ws.channel.ssl.internal.SSLHandshakeErrorTracker E CWWKO0801E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?

I don't see this error when it is not knative, is there a reason why switching to knative would cause this?

[arturdzm]

Currently OpenShift Serverless (Knative) does not support HTTPS on pod level.
The supported chain is:
Browser -> HTTPS -> Knative Ingress -> HTTPS -> sidecar container proxy -> localhost connection (HTTP) - server

[arturdzm]

OpenShift RFE:

https://issues.redhat.com/browse/RFE-1574

Knative GH issue:

knative/serving#11906

[leochr]

@jantley-ibm This known issue/limitation for Knative is documented here: https://github.com/application-stacks/runtime-component-operator/pull/396/files

[jantley-ibm]

https://ibmdocs-test.mybluemix.net/docs/en/SSAW57_liberty_test?topic=operator-known-issues-limitations

[leochr]

@jantley-ibm Thanks for the doc update. Looks good. Closing.