percona / roadmap

Public Percona Roadmaps
10 stars 1 forks source link

[K8SPSMDB-473] Allow to skip TLS verification for backup storage #45

Closed spron-in closed 2 years ago

spron-in commented 3 years ago

Community Note

Tell us about the feature Sometimes users run private S3-compatible storage with self-issued TLS certificate.

In that case Operators should be able to store backups there by either skipping TLS verification or by accepting self-issued CAs.

pgbackrest (used in PG Operator) has this functionality: {code:java} 2.4.26 Repository Storage Certificate Verify Option (--repo-storage-verify-tls) Repository storage certificate verify.

This option provides the ability to enable/disable verification of the storage (e.g. S3, Azure) server TLS certificate. Disabling should only be used for testing or other scenarios where a certificate has been self-signed. {code} and there is a corresponding flag in PG Operator: {code:java} spec.backup.verifyTLS{code} We need to add the same functionality to MySQL and MongoDB Operators.

This improvement adds the new flag into storages configuration in MongoDB Operator.