Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional trusted certificates for S3 endpoint #1796

Closed
dimitarvdimitrov opened this issue Apr 29, 2022 · 0 comments · Fixed by #7959
Closed

Additional trusted certificates for S3 endpoint #1796

dimitarvdimitrov opened this issue Apr 29, 2022 · 0 comments · Fixed by #7959
Labels
enhancement New feature or request storage/s3

Comments

@dimitarvdimitrov
Copy link
Contributor

Is your feature request related to a problem? Please describe.

My s3-compatible storage is running with self-signed certificates. Right now I am running Mimir with insecure_skip_verify: true on the bucket configs. I would like to stop this practice and run it with SSL/TLS verification.

Describe the solution you'd like

Be able to provide trusted certs in the configuration of Mimir and have insecure_skip_verify: false

Describe alternatives you've considered

Put the certificates in a well-known cert location on linux according to https://go.dev/src/crypto/x509/root_linux.go

While it should work, this isn't documented anywhere.

Additional context

Deploying this via the helm chart, so it would also be nice to support the added config option there too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request storage/s3
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant