Added flag for insecureSkipVerfiy (#1829)
This commit is contained in:
@@ -677,7 +677,9 @@ spec:
|
||||
- name: TLS_ENABLED
|
||||
value: "true"
|
||||
- name: MESSAGE_QUEUE_SECRETS
|
||||
value: /etc/fission/secrets
|
||||
value: /etc/fission/secrets
|
||||
- name: INSECURE_SKIP_VERIFY
|
||||
value: "{{ .Values.kafka.authentication.tls.insecureSkipVerify }}"
|
||||
volumeMounts:
|
||||
- name: kafka-secrets
|
||||
mountPath: /etc/fission/secrets
|
||||
|
||||
@@ -184,6 +184,8 @@ kafka:
|
||||
authentication:
|
||||
tls:
|
||||
enabled: false
|
||||
# InsecureSkipVerify controls whether a client verifies the server's certificate chain and host name.
|
||||
insecureSkipVerify: false # Warning: Setting this to true, makes TLS susceptible to man-in-the-middle attacks
|
||||
caCert: "" # path to certificate containing public key of CA authority
|
||||
userCert: "" # path to certificate containing public key of the user signed by CA authority
|
||||
userKey: "" # path to private key of the user
|
||||
|
||||
Reference in New Issue
Block a user