@@ -34,12 +34,13 @@ import (
34
34
)
35
35
36
36
const (
37
- restProxyPortEnvVar = "REST_PROXY_LISTEN_PORT"
38
- restProxyGrpcMaxMsgSize = "REST_PROXY_GRPC_MAX_MSG_SIZE_BYTES"
39
- restProxyGrpcPortEnvVar = "REST_PROXY_GRPC_PORT"
40
- restProxyTlsEnvVar = "REST_PROXY_USE_TLS"
41
- tlsCertEnvVar = "MM_TLS_KEY_CERT_PATH"
42
- tlsKeyEnvVar = "MM_TLS_PRIVATE_KEY_PATH"
37
+ restProxyPortEnvVar = "REST_PROXY_LISTEN_PORT"
38
+ restProxyGrpcMaxMsgSize = "REST_PROXY_GRPC_MAX_MSG_SIZE_BYTES"
39
+ restProxyGrpcPortEnvVar = "REST_PROXY_GRPC_PORT"
40
+ restProxyTlsEnvVar = "REST_PROXY_USE_TLS"
41
+ restProxySkipVerifyEnvVar = "REST_PROXY_SKIP_VERIFY"
42
+ tlsCertEnvVar = "MM_TLS_KEY_CERT_PATH"
43
+ tlsKeyEnvVar = "MM_TLS_PRIVATE_KEY_PATH"
43
44
)
44
45
45
46
var (
@@ -85,8 +86,20 @@ func run() error {
85
86
var transportCreds credentials.TransportCredentials
86
87
if useTLS , ok := os .LookupEnv (restProxyTlsEnvVar ); ok && useTLS == "true" {
87
88
logger .Info ("Using TLS" )
89
+
90
+ skipVerifyBool := false
91
+ skipVerify , ok := os .LookupEnv (restProxySkipVerifyEnvVar )
92
+ if ok {
93
+ err := * new (error )
94
+ skipVerifyBool , err = strconv .ParseBool (skipVerify )
95
+ if err != nil {
96
+ logger .Error (err , "Failed to parse %s=%s to bool" , restProxySkipVerifyEnvVar , skipVerify )
97
+ skipVerifyBool = false
98
+ }
99
+ }
100
+
88
101
transportCreds = credentials .NewTLS (& tls.Config {
89
- InsecureSkipVerify : true ,
102
+ InsecureSkipVerify : skipVerifyBool ,
90
103
})
91
104
} else {
92
105
logger .Info ("Not using TLS" )
0 commit comments