Skip to content

feat: add new TLS configuration options #133

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Feb 18, 2021

Conversation

joemiller
Copy link
Contributor

@joemiller joemiller commented Oct 31, 2020

  • tls_key - (Optional) Client TLS key file to use to authenticate to the
    Grafana server. May alternatively be set via the GRAFANA_TLS_KEY
    environment variable.

  • tls_cert - (Optional) Client TLS certificate file to use to authenticate
    to the Grafana server. May alternatively be set via the GRAFANA_TLS_CERT
    environment variable.

  • ca_cert - (Optional) Certificate CA bundle to use to verify the
    Grafana server's certifiate.. May alternatively be set via the
    GRAFANA_CA_CERT environment variable.

  • insecure_skip_verify - (Optional) Bool. Disable verification of the
    Grafana Server's certificate. May alternatively be set via the
    GRAFANA_INSECURE_SKIP_VERIFY environment variable.

closes #107
closes #53

@joemiller joemiller force-pushed the mtls-client-certs branch 2 times, most recently from fbd7a2d to 514ebad Compare October 31, 2020 23:59
@joemiller joemiller closed this Nov 1, 2020
@joemiller joemiller reopened this Nov 1, 2020
@joemiller joemiller changed the title wip feat: add new TLS configuration options Nov 1, 2020
@joemiller joemiller marked this pull request as ready for review November 1, 2020 00:02
@joemiller
Copy link
Contributor Author

Ping. Any feedback on this that I can address?

* ``tls_key`` - (Optional) Client TLS key file to use to authenticate to the
  Grafana server. May alternatively be set via the ``GRAFANA_TLS_KEY``
  environment variable.

* ``tls_cert`` - (Optional) Client TLS certificate file to use to authenticate
  to the Grafana server. May alternatively be set via the ``GRAFANA_TLS_CERT``
  environment variable.

* ``ca_cert`` - (Optional) Certificate CA bundle to use to verify the
  Grafana server's certifiate.. May alternatively be set via the
  ``GRAFANA_CA_CERT`` environment variable.

* ``insecure_skip_verify`` - (Optional) Bool. Disable verification of the
  Grafana Server's certificate. May alternatively be set via the
  ``GRAFANA_INSECURE_SKIP_VERIFY`` environment variable.
@joemiller
Copy link
Contributor Author

Updated to resolve conflicts with the current main branch

Copy link
Contributor

@trotttrotttrott trotttrotttrott left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@joemiller this is great. There's now a docker-compose.yml file in master though. Could we rename your's to docker-compose.tls.yml and target it with -f flag in the test-serve-tls target?

@joemiller
Copy link
Contributor Author

@trotttrotttrott Hi, Thanks for picking this up. I'd be happy to rename the file but it looks like you already took care of that. Anything else I can do to help?

@trotttrotttrott
Copy link
Contributor

@joemiller no prob! I was just going to comment. I think it's ready to go. I was going to merge it as soon as CI passes. Thanks!

@trotttrotttrott trotttrotttrott merged commit 369494e into grafana:master Feb 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

support mTLS client certs when connecting to Grafana Invalid CA
2 participants