Skip to content

Add Option to Disable TLS Certificate Verification in Zitadel Terraform Provider #228

@veinnotnice

Description

@veinnotnice

Preflight Checklist

  • I could not find a solution in the existing issues, docs, nor discussions
  • I have joined the ZITADEL chat

Describe your problem

Feature Proposal: Add Option to Disable TLS Certificate Verification in Zitadel Terraform Provider

Problem Statement

Currently, the Zitadel Terraform provider does not support environments with self-signed or untrusted TLS certificates. This creates a significant barrier for users in the following scenarios:

  • Development and testing environments where self-signed certificates are commonly used
  • Internal enterprise environments with private certificate authorities
  • Air-gapped or restricted environments where public certificate authorities cannot be reached
  • Scenarios where certificate pinning or custom trust chains are employed

When attempting to use the provider with such certificates, operations fail with TLS verification errors, preventing legitimate use cases.

Describe your ideal solution

Proposed Solution

Add a new provider-level configuration option skip_tls_verify (boolean) that allows users to disable TLS certificate verification when connecting to Zitadel instances.certificate authorities cannot be reached
Scenarios where certificate pinning or custom trust chains are employed

When attempting to use the provider with such certificates, operations fail with TLS verification errors, preventing legitimate use cases.

Version

No response

Additional Context

No response

Metadata

Metadata

Assignees

Type

No type

Projects

Status

✅ Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions