Merge pull request #1817 from rzetelskik/manager-disable-tls-1.11

[v1.11] Explicitly disable CQL over TLS in Scylla Manager cluster integration
scylladb · Mar 12, 2024 · f99d0b3 · f99d0b3
2 parents 46ad382 + 746558b
commit f99d0b3
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/controller/manager/sync_action.go b/pkg/controller/manager/sync_action.go
@@ -44,6 +44,9 @@ func runSync(ctx context.Context, cluster *v1.ScyllaCluster, authToken string, s
 							ID:   c.ID,
 							Name: naming.ManagerClusterName(cluster),
 							Host: naming.CrossNamespaceServiceNameForCluster(cluster),
+							// TODO: enable CQL over TLS when https://github.com/scylladb/scylla-operator/issues/1766 is completed
+							ForceNonSslSessionPort: true,
+							ForceTLSDisabled:       true,
 						},
 					})
 					requeue = true
@@ -61,6 +64,9 @@ func runSync(ctx context.Context, cluster *v1.ScyllaCluster, authToken string, s
 				Host:      naming.CrossNamespaceServiceNameForCluster(cluster),
 				Name:      naming.ManagerClusterName(cluster),
 				AuthToken: authToken,
+				// TODO: enable CQL over TLS when https://github.com/scylladb/scylla-operator/issues/1766 is completed
+				ForceNonSslSessionPort: true,
+				ForceTLSDisabled:       true,
 			},
 		})
 		requeue = true