Uploaded image for project: 'Percona Operator for MongoDB'
  1. Percona Operator for MongoDB
  2. K8SPSMDB-473

Allow to skip TLS verification for backup storage

    XMLWordPrintable

Details

    Description

      Sometimes users run private S3-compatible storage with self-issued TLS certificate.

      In that case Operators should be able to store backups there by either skipping TLS verification or by accepting self-issued CAs.

      pgbackrest (used in PG Operator) has this functionality:

      2.4.26 Repository Storage Certificate Verify Option (--repo-storage-verify-tls)
Repository storage certificate verify.

This option provides the ability to enable/disable verification of the storage (e.g. S3, Azure) server TLS certificate. Disabling should only be used for testing or other scenarios where a certificate has been self-signed.

      and there is a corresponding flag in PG Operator:

      spec.backup.verifyTLS

      We need to add the same functionality to MySQL and MongoDB Operators.

      This improvement adds the new flag into storages configuration in MongoDB Operator.

      Attachments

        Issue Links

          clones

          Improvement - An improvement or enhancement to an existing feature or task. K8SPXC-758 Allow to skip TLS verification for backup storage

          • Medium - Minor loss of function, or other problem where easy workaround is present.
          • Done
          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. PBM-680 Skip TLS verification for object storage

          • Medium - Minor loss of function, or other problem where easy workaround is present.
          • Done
          relates to

          Admin & Maintenance Task - For Percona Internal usage only K8SPSMDB-474 Document - new feature - skip TLS verification for backups

          • Medium - Minor loss of function, or other problem where easy workaround is present.
          • Done
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              sergey.pronin Sergey Pronin
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Smart Checklist