Skip to content

Add skip tls verification option to otlp exporter#1076

Merged
valyria257 merged 1 commit intonginx:v3from
valyria257:naas-collector-devenv
May 15, 2025
Merged

Add skip tls verification option to otlp exporter#1076
valyria257 merged 1 commit intonginx:v3from
valyria257:naas-collector-devenv

Conversation

@valyria257
Copy link
Collaborator

Proposed changes

For testing purposes, it makes life easier to configure whether or not to skip TLS verification in cases of self-signed certificates.

Checklist

Before creating a PR, run through this checklist and mark each as complete.

  • I have read the CONTRIBUTING document
  • I have run make install-tools and have attached any dependency changes to this pull request
  • If applicable, I have added tests that prove my fix is effective or that my feature works
  • If applicable, I have checked that any relevant tests pass after adding my changes
  • If applicable, I have updated any relevant documentation (README.md)
  • If applicable, I have tested my cross-platform changes on Ubuntu 22, Redhat 8, SUSE 15 and FreeBSD 13

For testing purposes, it makes life easier to configure whether or not to skip TLS
verification in cases of self-signed certificates.
@valyria257 valyria257 requested a review from a team as a code owner May 13, 2025 20:23
@github-actions
Copy link
Contributor

github-actions bot commented May 13, 2025

✅ All required contributors have signed the F5 CLA for this PR. Thank you!
Posted by the CLA Assistant Lite bot.

@valyria257
Copy link
Collaborator Author

I have hereby read the F5 CLA and agree to its terms

tls:
insecure: {{ if .TLS -}}false{{ else -}}true{{- end }}
{{- if .TLS }}
insecure_skip_verify: {{ .TLS.SkipVerify }}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is there a way to set this if SkipVerify is provided and if not, set it to false, which is a good default to have?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If TLS.SkipVerify is not set, it'll default to false (default value for a bool: https://github.com/nginx/agent/blob/v3/internal/config/types.go#L278)

Copy link
Collaborator

@CVanF5 CVanF5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for contributing!

@valyria257 valyria257 merged commit f21a747 into nginx:v3 May 15, 2025
13 of 14 checks passed
@valyria257 valyria257 deleted the naas-collector-devenv branch May 15, 2025 20:52
@dhurley dhurley changed the title NGINXaaS: add skip tls verification option to otlp exporter Add skip tls verification option to otlp exporter May 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants