From 48c4d8c90037022601579391d13e4b6e1d9959ec Mon Sep 17 00:00:00 2001 From: "Huang, Sophie (sh879n)" Date: Tue, 11 Aug 2020 21:26:15 +0000 Subject: [PATCH] Add TLS handling to mariadb backup and restore Added certification handling to restore_mariadb script. Change-Id: Iff3a15c0b4e84857cafd5b70c6cbea5363734751 --- mariadb/templates/bin/_restore_mariadb.sh.tpl | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/mariadb/templates/bin/_restore_mariadb.sh.tpl b/mariadb/templates/bin/_restore_mariadb.sh.tpl index 6ee92e406..b8840e7b3 100755 --- a/mariadb/templates/bin/_restore_mariadb.sh.tpl +++ b/mariadb/templates/bin/_restore_mariadb.sh.tpl @@ -12,6 +12,8 @@ # License for the specific language governing permissions and limitations # under the License. +{{- $envAll := . }} + # Capture the user's command line arguments ARGS=("$@") @@ -44,6 +46,12 @@ RESTORE_CMD="mysql \ --user=${RESTORE_USER} \ --password=${RESTORE_PW} \ --host=$MARIADB_SERVER_SERVICE_HOST \ +{{- if .Values.manifests.certificates }} + --ssl-verify-server-cert=false \ + --ssl-ca=/etc/mysql/certs/ca.crt \ + --ssl-key=/etc/mysql/certs/tls.key \ + --ssl-cert=/etc/mysql/certs/tls.crt \ +{{- end }} --connect-timeout 10" # Get a single database data from the SQL file.