Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support disabling mTLS after mTLS is enabled. #104

Open
paulzhang97 opened this issue Mar 29, 2024 · 0 comments
Open

Support disabling mTLS after mTLS is enabled. #104

paulzhang97 opened this issue Mar 29, 2024 · 0 comments

Comments

@paulzhang97
Copy link
Contributor

paulzhang97 commented Mar 29, 2024

After mTLS is enabled at Schema Registry, HTTP Proxy or Kafka, disabling mTLS via unsetting clientCACertRef does not work. Disabling mTLS should be supported.

Steps on reproducing the issue:

  1. Enable mTLS in cluster CR,
      tls:
        clientCACertRef:
          kind: Secret
          name: proxy-trusted-ca-certs
        enabled: true
        requireClientAuth: true
  1. Disable mTLS by not setting clientCACertRef
      tls:
        enabled: true
        requireClientAuth: false

JIRA Link: K8S-206

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant