MariaDB: Disable SSL chain completion on ingress controller
This PS sets `--enable-ssl-chain-completion=false` for the MariaDB ingress controller. This is the default for current versions of the nginx-ingress-controller, but for 0.9.0 needs to be set. If enableSSLChainCompletion is left on, nginx will attempt to autocomplete SSL certificate chains with missing intermediate CA certificates, causing unnecessary network and errors in pod logs. Change-Id: I088b33fe994281dca6997baa87a6b599c3f10c14 Closes-Bug: #1835364
This commit is contained in:
parent
683f755f7e
commit
09bf431fe7
@ -29,6 +29,7 @@ function start () {
|
||||
--ingress-class=${INGRESS_CLASS} \
|
||||
--default-backend-service=${POD_NAMESPACE}/${ERROR_PAGE_SERVICE} \
|
||||
--configmap=${POD_NAMESPACE}/mariadb-ingress-conf \
|
||||
--enable-ssl-chain-completion=false \
|
||||
--tcp-services-configmap=${POD_NAMESPACE}/mariadb-services-tcp
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user