Add update-ca-trust. Remove debug

Author: rnc

deploy/tasks/pre-build.yaml

@@ -81,7 +81,6 @@ spec:
           cpu: 10m
           memory: 512Mi
       script: |
-        ls -lR $(workspaces.source.path)
         /opt/jboss/container/java/run/run-java.sh $(params.BUILD_TOOL)-prepare --java-version=$(params.JAVA_VERSION) --build-tool-version=$(params.BUILD_TOOL_VERSION) --recipe-image=$(params.RECIPE_IMAGE) --request-processor-image=$(params.JVM_BUILD_SERVICE_REQPROCESSOR_IMAGE) --disabled-plugins=$(params.BUILD_PLUGINS) $(workspaces.source.path)/source
       env:
         - name: BUILD_SCRIPT
@@ -119,7 +118,6 @@ spec:
     - name: create-pre-build-image
       image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:52f1391e6f1c472fd10bb838f64fae2ed3320c636f536014978a5ddbdfc6b3af
       script: |
-        ls -lR $(workspaces.source.path)
         echo "Creating pre-build-image archive"
         create-archive --store $(params.IMAGE_URL) $(results.PRE_BUILD_IMAGE_DIGEST.path)=$(workspaces.source.path)/source
       env:

java-components/build-request-processor/src/main/java/com/redhat/hacbs/container/build/preprocessor/maven/MavenPrepareCommand.java

@@ -1,5 +1,7 @@
 package com.redhat.hacbs.container.build.preprocessor.maven;
 
+import static org.apache.commons.lang3.StringUtils.isNotEmpty;
+
 import java.io.BufferedReader;
 import java.io.IOException;
 import java.nio.file.FileVisitResult;
@@ -32,8 +34,6 @@
 import io.quarkus.logging.Log;
 import picocli.CommandLine;
 
-import static org.apache.commons.lang3.StringUtils.isNotEmpty;
-
 /**
  * A simple preprocessor that attempts to fix problematic maven build files.
  * <p>

java-components/driver/src/main/resources/pipeline.yaml

@@ -41,6 +41,19 @@ spec:
       value: "%{JAVA_VERSION}"
     - name: BUILD_SCRIPT
       value: |
+        update-ca-trust
+
+        # Go through certificates and insert them into the cacerts
+        for cert in /etc/pki/ca-trust/source/anchors/*; do
+          echo "inserting $cert into java cacerts"
+          keytool -import -alias $(basename $cert)-ca \
+            -file $cert \
+            -keystore /etc/pki/java/cacerts \
+            -storepass changeit --noprompt
+        done;
+
+        echo "Building the project ..."
+
         %{BUILD_SCRIPT}
     - name: MVN_REPO_DEPLOY_URL
       value: "%{MVN_REPO_DEPLOY_URL}"
@@ -55,7 +68,7 @@ spec:
     - name: ENABLE_INDY_PROXY
       value: "false"
     - name: JVM_BUILD_SERVICE_REQPROCESSOR_IMAGE
-      value: quay.io/ncross/hacbs-jvm-build-request-processor:latest
+      value: "quay.io/ncross/hacbs-jvm-build-request-processor:latest"
       # "quay.io/redhat-user-workloads/konflux-jbs-pnc-tenant/jvm-build-service/build-request-processor:latest"
   # TODO: Should PNC set both limits and requests? See
   #   https://home.robusta.dev/blog/kubernetes-memory-limit