[GitHub] [apisix] spacewander commented on a change in pull request #4665: docs: Set the CA certificate for etcd in mtls.md

[GitBox <gi...@apache.org>]

spacewander commented on a change in pull request #4665:
URL: https://github.com/apache/apisix/pull/4665#discussion_r676231488



##########
File path: docs/en/latest/mtls.md
##########
@@ -75,6 +75,14 @@ etcd:
     key: /data/certs/etcd_client.key        # path of key used by the etcd client
 ```
 
+Also set the CA certificate.
+
+```yaml
+apisix:
+  ssl:
+    ssl_trusted_certificate: /path/to/certs/ca-certificates.crt       # path of CA certificate used by the etcd client

Review comment:
       this is the CA used by the etcd server

##########
File path: docs/en/latest/mtls.md
##########
@@ -75,6 +75,14 @@ etcd:
     key: /data/certs/etcd_client.key        # path of key used by the etcd client
 ```
 
+Also set the CA certificate.

Review comment:
       If the certificate used by etcd is already trusted by APISIX, we don't need to set the CA.




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org