Enable Configurable TLS and Auth for Non-Production Environments #10
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is a cool project! I hope the community appreciates it.
I encountered some issues while setting up
runtime-radarin a non-production environment with TLS disabled.This PR simplifies the process by making TLS and authentication settings more flexible. Here’s what’s included:
What’s Fixed
Added
global.tls.enabledandglobal.auth.enabled(default:true). This lets us disable security features in dev or staging without changing the code.Reverse-Proxy no longer requires certificates. Previously, even with TLS disabled, the
reverse-proxystill needed certificates. Now, the Helm chart explicitly setsTLS=falsein environment variables when disabled, so there are no more "missing certs" errors.No unnecessary token generation. When authentication is disabled (
global.auth.enabled=false), the chart no longer creates random tokens or adds unused annotations. This reduces unnecessary outputs and keeps the setup clean.Why This Helps
These changes make it easier to deploy
runtime-radarin non-production environments. With TLS and auth turned off, the system works smoothly without extra configuration.How to Test
global.tls.enabled=falseandglobal.auth.enabled=falseinvalues.yaml.reverse-proxystarts without TLS errorsLet me know if you want any changes. I am happy to make adjustments.
P.S. The changes are mostly adding conditionals and documentation. There are no breaking changes.