Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Revert to v3 etcd api but skip TLS verification
Using the etcd v3 api causes vault to suffer from bug hashicorp/vault#4961. But v2 has its own issues *1. This patch switches back to using the v3 api but disables vault from perfomring TLS certificate checks against the etcd cluster. Given that the charm deployed vault only uses etcd to store a token for HA and that token is inturn encrypted by vault it does not seem a significant security risk. *1 As Dmitrii Shcherbakov noted, the vault documentation expresses reservations about the v2 api: https://www.vaultproject.io/docs/configuration/storage/etcd.html "the Etcd storage backend supports high availability. The v2 API has known issues with HA support and should not be used in HA scenarios." Change-Id: I204bcdbfbc7ed2084542fca7781f1bd802bdb77a
- Loading branch information