From 9642eedce6e29e840f94cbbf782fcfb10372e837 Mon Sep 17 00:00:00 2001 From: owensmallwood Date: Tue, 3 Dec 2024 15:56:13 -0600 Subject: [PATCH] Unified Storage: Use tls preferred when grafana db using ssl (#97378) When unified storage is using the grafana db (default case for on-prem), if the db is using ssl then set tls=preferred. This fixes an on-prem bug in 11.3.1. --- pkg/storage/unified/sql/db/dbimpl/dbEngine.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkg/storage/unified/sql/db/dbimpl/dbEngine.go b/pkg/storage/unified/sql/db/dbimpl/dbEngine.go index abcd707832a..ddc4aa4ca4d 100644 --- a/pkg/storage/unified/sql/db/dbimpl/dbEngine.go +++ b/pkg/storage/unified/sql/db/dbimpl/dbEngine.go @@ -25,6 +25,10 @@ func getEngineMySQL(getter confGetter) (*xorm.Engine, error) { // See: https://dev.mysql.com/doc/refman/en/sql-mode.html "@@SESSION.sql_mode": "ANSI", } + sslMode := getter.String("ssl_mode") + if sslMode == "true" || sslMode == "skip-verify" { + config.Params["tls"] = "preferred" + } tls := getter.String("tls") if tls != "" { config.Params["tls"] = tls