Open blushingpenguin opened 8 months ago
Hey @blushingpenguin . Thank you for raising it. Yeah, we have a task to simplify our unsafe flag behavior. We acknowlege that such implicit behavior does no good.
It is not a bug though, as this behavior is captured in our docs. Let me check with the team on where are we.
Report
setting
means that requireTLS is (silently) ignored. From the code this appears to be because "unsafe" means both "less than 3 replicas" (I would like to use a PSA config) and also "don't use TLS certificates for mongo replica authentication"
I would suggest either splitting this flag into two to allow for a PSA config that requires tls, or leaving it and considering a PSA configuration safe.
More about the problem
See repro steps
Steps to reproduce
Versions
Anything else?
No response