You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "lhotari (via GitHub)" <gi...@apache.org> on 2024/01/17 20:40:26 UTC
[PR] Don't use TLS from function instances to brokers by default [pulsar-helm-chart]
lhotari opened a new pull request, #435:
URL: https://github.com/apache/pulsar-helm-chart/pull/435
### Motivation
- CI is currently broken after enabling Pulsar Function testing in all configuration
- When TLS is enabled Function instances cannot communicate to the broker since Function instances don't currently have the custom TLS CA cert available.
- When the function worker runs on the broker, the configuration `PF_tlsAllowInsecureConnection: "true"` has no impact and it's not possible to configure `tlsAllowInsecureConnection=true` only for the function instance. [The function worker uses the broker configuration for the tlsAllowInsecureConnection setting](https://github.com/apache/pulsar/blob/fa81bbcacb33c57c24f0d4ce82d5e25d3ac1f167/pulsar-broker/src/main/java/org/apache/pulsar/broker/PulsarService.java#L1820) and changing that would have a larger impact.
### Modifications
- Add new configuration `tls.function_instance.enabled` that defaults to false. This controls whether TLS is used from function instances to the broker.
### Verifying this change
- [ ] Make sure that the change passes the CI checks.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Don't use TLS from function instances to brokers by default [pulsar-helm-chart]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari merged PR #435:
URL: https://github.com/apache/pulsar-helm-chart/pull/435
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org