k3s-io / kine

Run Kubernetes on MySQL, Postgres, sqlite, dqlite, not etcd.
Apache License 2.0
1.54k stars 231 forks source link

How to enable TLS connection for Kine #195

Closed shihaoH closed 1 year ago

shihaoH commented 1 year ago

I only want to enable certificate verification for the Kine connection, but I don't need to enable TLS for connecting to MySQL.

brandond commented 1 year ago

Do you only want to have Kine enable TLS on its listener? Or do you want to both enable TLS, and require client certificate authentication?

At the moment, kine does support TLS, via the --server-cert-file and --server-key-file options. It does not support client certificate authentication - or any authentication at all, for that matter.