Skip to content

feat: part 2 of TLS configs: disabling insecure#1

Open
fkywong wants to merge 2 commits intofwong/tls-configfrom
fwong/tls-config-2
Open

feat: part 2 of TLS configs: disabling insecure#1
fkywong wants to merge 2 commits intofwong/tls-configfrom
fwong/tls-config-2

Conversation

@fkywong
Copy link
Copy Markdown
Owner

@fkywong fkywong commented Feb 27, 2026

Summary

A continuation of Altinity#121 (when that PR merges, the base of this PR will be updated to point back to upstream).

Most of the description and overarching intent is captured in that PR.

Changes

  1. Introduce the option to set insecure: no on the cluster per the docs.
  2. Updates the TLS smoke test fixture.

Limitations

  1. This PR does not enable support for client TLS nor mutual TLS (mTLS).

Tests

All existing and new test features & scenarios pass locally:

Mar 05,2026 22:28:38           ⟥  And I clean up, flags:TE|MANDATORY|CLEANUP
Mar 05,2026 22:28:38             ⟥  And uninstall ClickHouse Operator, flags:TE|MANDATORY|CLEANUP
               124us             ⟥    [note] > helm uninstall upgrade -n upgrade
                39ms             ⟥⟤ OK uninstall ClickHouse Operator, /smoke/comprehensive/check all upgrades/upgrade_initial_to_upgrade/I clean up/uninstall ClickHouse Operator
                39ms           ⟥⟤ OK I clean up, /smoke/comprehensive/check all upgrades/upgrade_initial_to_upgrade/I clean up
               5m 3s         ⟥⟤ OK upgrade_initial_to_upgrade, /smoke/comprehensive/check all upgrades/upgrade_initial_to_upgrade
               5m 3s       ⟥⟤ OK check all upgrades, /smoke/comprehensive/check all upgrades
Mar 05,2026 22:28:38       ⟥  Finally I clean up, flags:TE|MANDATORY|CLEANUP
               287us       ⟥    [note] OrbStack environment lifecycle is managed outside of this framework.
               316us       ⟥⟤ OK I clean up, /smoke/comprehensive/I clean up
             11m 39s     ⟥⟤ OK comprehensive, /smoke/comprehensive
             11m 39s   ⟥⟤ OK smoke, /smoke

Passing

✔ [ OK ] '/smoke/comprehensive/check all fixtures/deploy_01-minimal-single-node' (1m 2s)
✔ [ OK ] '/smoke/comprehensive/check all fixtures/deploy_02-replicated-with-users' (2m 47s)
✔ [ OK ] '/smoke/comprehensive/check all fixtures/deploy_08-extracontainer-data-mount' (51s 292ms)
✔ [ OK ] '/smoke/comprehensive/check all fixtures/deploy_09-usersprofiles-settings' (50s 911ms)
✔ [ OK ] '/smoke/comprehensive/check all fixtures/deploy_10-tls' (1m 3s)
✔ [ OK ] '/smoke/comprehensive/check all fixtures' (6m 34s)
✔ [ OK ] '/smoke/comprehensive/check all upgrades/upgrade_initial_to_upgrade' (5m 3s)
✔ [ OK ] '/smoke/comprehensive/check all upgrades' (5m 3s)
✔ [ OK ] '/smoke/comprehensive' (11m 39s)
✔ [ OK ] '/smoke' (11m 39s)

1 module (1 ok)
3 features (3 ok)
6 scenarios (6 ok)
90 steps (90 ok)

Total time 11m 39s

Executed on Mar 05,2026 22:16
TestFlows.com Open-Source Software Testing Framework v2.0.240813.1212956

@fkywong fkywong force-pushed the fwong/tls-config-2 branch from 0ed4226 to 4377847 Compare March 6, 2026 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant