Skip to content

Commit

Permalink
CRITEO - rgw: use insecure TLS
Browse files Browse the repository at this point in the history
Backport rook#8712
And also apply the patch on user creation
  • Loading branch information
n.fraison committed Sep 22, 2021
1 parent fc44c97 commit 948e9b3
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions pkg/operator/ceph/object/health.go
Expand Up @@ -18,7 +18,9 @@ package object

import (
"context"
"crypto/tls"
"fmt"
"net/http"
"time"

"github.com/ceph/go-ceph/rgw/admin"
Expand Down Expand Up @@ -170,6 +172,11 @@ func (c *bucketChecker) checkObjectStoreHealth() error {
if err != nil {
return errors.Wrap(err, "failed to initialize s3 connection")
}
// Force the s3 client to use insecure TLS connection
s3client.Client.Config.HTTPClient.Transport = &http.Transport{
// #nosec G402 is enabled only for testing
TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
}

// Force purge the s3 object before starting anything
cleanupObjectHealthCheck(s3client, c.objContext.UID)
Expand Down

0 comments on commit 948e9b3

Please sign in to comment.