Goal Summary:
Enable RHACS S3 integration to optionally skip TLS certificate verification, allowing organizations using internal or self-signed PKI for their S3-compatible storage to maintain connectivity for services not exposed to the internet.
Goals and expected user outcomes:
A RHACS Administrator will gain a new, visible configuration option within the S3 Integration settings to explicitly disable TLS certificate verification.
- The user can configure an S3-compatible integration (e.g., for reporting or backup) against an endpoint secured with a self-signed or internal-PKI certificate.
- A toggle or checkbox labeled "Skip TLS Verification" or similar will be available during S3 integration setup.
- When this option is enabled, the RHACS component responsible for communication will ignore certificate trust errors.
Acceptance Criteria:
- The S3 integration configuration UI/API must include a clear, explicit, and optional setting to "Skip TLS Certificate Verification."
- When the "Skip TLS Certificate Verification" option is enabled, RHACS must successfully connect to and perform operations on an S3-compatible endpoint secured with an untrusted (self-signed/internal) TLS certificate.
- When the "Skip TLS Certificate Verification" option is disabled (default state), RHACS must fail to connect to an S3-compatible endpoint with an untrusted certificate and provide a clear error message.
- The feature must support both new and existing S3 integrations.
Success Criteria or KPIs measured:
A list of specific, measurable criteria that will be used to determine if the feature is successful. Include key performance indicators (KPIs) or other metrics., etc. Initial completion during Refinement status.
<enter success criteria and/or KPIs here>
Use Cases (Optional):
Include use case diagrams, main success scenarios, alternative flow scenarios together with user type/persona. Initial completion during Refinement status.
<your text here>
Out of Scope (Optional):
High-level list of items that are out of scope. Initial completion during Refinement status.
<your text here>
- is triggered by
-
RFE-8394 RHACS: Ability to skip tls for S3 integration.
-
- Approved
-