xco-sk / eck-custom-resources

Kubernetes operator for Indices, Index Templates, Roles, Users and other Elasticsearch and Kibana related resources.
Apache License 2.0
36 stars 8 forks source link

Fix code scanning alert - Disabled TLS certificate check #44

Closed xco-sk closed 1 year ago

xco-sk commented 1 year ago

Currently, the Kibana client falls back to InsecureSkipVerify if the certificate is not defined in the config and the URL starts with https://. While this was fine for testing, the production code should raise an exception in such a case, navigating the user to properly configure the certificate used for communication with Kibana.

Tracking issue for: