Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-3781

REPO_MIRROR_TLS_VERIFY always set to true even though custom config bundle has it set to false

    XMLWordPrintable

Details

    • 3
    • False
    • None
    • False
    • Quay Enterprise
    • 0

    Description

      The REPO_MIRROR_TLS_VERIFY flag in Quay's config.yaml file is always set to true even though the flag is explicitly set to false in the custom config bundle:

      FEATURE_USER_INITIALIZE: true
      BROWSER_API_CALLS_XHR_ONLY: false
      SUPER_USERS: 
       - quay-admin
      FEATURE_USER_CREATION: false
      EXTERNAL_TLS_TERMINATION: false
      SERVER_HOSTNAME: QUAY_HOSTNAME
      PREFERRED_URL_SCHEME: https
      FEATURE_REPO_MIRROR: true
      REPO_MIRROR_TLS_VERIFY: false
      

      Mirror component is managed by the operator:

      spec: 
        components: 
      ...
        - kind: mirror
          managed: true
        configBundleSecret: config-bundle-secret
      

      However, even though the component is managed and we have REPO_MIRROR_TLS_VERIFY explicitly mentioned in the custom config bundle, no errors are present in the operator pod logs and the rendered configuration, apart from the said switch, is sound and Quay is functioning properly.

      The client also informed us that changing the property via the config tool also doesn't work. Even if they click on the "redeploy" button and Quay gets restarted, the flag is still set to true.

      Please check! Thanks!

      NOTES FROM THE TEAM MEETING

      Attachments

        Activity

          People

            Unassigned Unassigned
            rhn-support-ibazulic Ivan Bazulic
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: