Skip to content

No option to set the CA (or disable CA verification) for OAuth #36

@bigon

Description

@bigon

Hello,

When deploying the dev example configuration on EKS, up complains with the following errors:

caller=level.go:63 ts=2021-09-30T13:58:58.295417174Z name=up level=error caller=main.go:113 component=writer msg="failed to make request" err="making request: Post "https://dex.dex.svc.cluster.local:5556/dex/auth?client_id=test&response_type=code&scope=openid+profile+email+groups&state=I+love+Observatorium\": x509: certificate signed by unknown authority"

The documentation says that If no CA is specified, there won't be any verification, but this only seems to apply to the endpoint, not to the eventual OAuth part

Either the existing TLS configuration options should be reused or new one should be added for that case

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions