search

cloudfoundry / cf-for-k8s

The open source deployment manifest for Cloud Foundry on Kubernetes
Apache License 2.0
300 stars 115 forks source link

Add external database support for GCP Cloud SQL with SSL verification #264

Open Birdrock opened 4 years ago

Birdrock commented 4 years ago

Is your feature request related to a problem? Please describe. The current external database support for UAA and CAPI is configured with full SSL verification or none. GCP Cloud SQL databases cannot currently be used because they don't have a hostname, and the certificates are not configurable with a hostname - they require skipping hostname verification.

See an explanation here: https://stackoverflow.com/a/33880741

Describe the solution you'd like This is informational as a known issue.

Describe alternatives you've considered If this functionality is needed, the configuration can be extended to support different SSL modes.

cf-gitbot commented 4 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/173597215

The labels on this github issue will be updated when the story is started.