chore: allow insecure chains for dtrust - still secured by certificat…

…e pinning in service directory, update eps to 0.1.16
iris-connect · Jun 21, 2021 · 588359f · 588359f
1 parent d28b9f4
commit 588359f
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 3 deletions.
diff --git a/infrastructure/iris-gateway/templates/locations-eps/configmap.yaml b/infrastructure/iris-gateway/templates/locations-eps/configmap.yaml
@@ -41,6 +41,7 @@ data:
 {{- end}}
             certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).locations }}.crt"
             key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).locations }}.key"
+            insecure_skip_verify: true
       - name: main JSON-RPC client  # creates outgoing JSONRPC connections to deliver and receive messages
         type: jsonrpc_client
         settings:

diff --git a/infrastructure/iris-gateway/templates/public-proxy-eps/configmap.yaml b/infrastructure/iris-gateway/templates/public-proxy-eps/configmap.yaml
@@ -41,6 +41,7 @@ data:
 {{- end}}
             certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.crt"
             key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.key"
+            insecure_skip_verify: true
       - name: main JSON-RPC client  # creates outgoing JSONRPC connections to deliver and receive messages
         type: jsonrpc_client
         settings:
@@ -54,6 +55,7 @@ data:
             certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.crt"
             key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.key"
             server_name: {{ (index .Values.serviceNames .Values.environment).publicProxy }}
+            insecure_skip_verify: true
       - name: main gRPC client # creates outgoing gRPC connections to deliver and receive messages
         type: grpc_client
         settings:
@@ -75,4 +77,3 @@ data:
 {{- end}}
             certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.crt"
             key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.key"
-            verify_client: false
diff --git a/infrastructure/iris-gateway/templates/public-proxy/configmap.yaml b/infrastructure/iris-gateway/templates/public-proxy/configmap.yaml
@@ -29,4 +29,4 @@ data:
 {{- end}}
           certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.crt"
           key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).publicProxy }}.key"
-          verify_client: false
+          insecure_skip_verify: true
diff --git a/infrastructure/iris-gateway/templates/service-directory/configmap.yaml b/infrastructure/iris-gateway/templates/service-directory/configmap.yaml
@@ -13,6 +13,7 @@ data:
 {{- end}}
         certificate_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).serviceDirectory }}.crt"
         key_file: "{{ .Values.tls.mountPath }}/{{ (index .Values.serviceNames .Values.environment).serviceDirectory }}.key"
+        insecure_skip_verify: true
     directory:
       database_file: {{ .Values.serviceDirectory.persistentStoragePath }}/service-directory.records
       ca_intermediate_certificate_files:

diff --git a/infrastructure/iris-gateway/values.yaml b/infrastructure/iris-gateway/values.yaml
@@ -3,7 +3,7 @@
 #   production: --set environment=production
 environment: undefined
 
-epsRepoTag: v0.1.15
+epsRepoTag: v0.1.16
 
 tls:
   keystoreSecretName: tls-keystore