mirror of
https://github.com/grafana/grafana.git
synced 2024-11-25 18:30:41 -06:00
f021f97c31
* DataSourceSettings: Add servername field to DataSource TLS config A DNS lookup URL can be provided in the DataSource URL field in order to dynamically load balance between multiple instances of a DataSource. When using mutual TLS, Golang's TLS config implementation checks that the certificate's common name (< 1.15) or subject alternative name (>= 1.15) has the same value as the domain being accessed. If the DNS entry is dynamically generated for a specific environment, the certificate cannot be generated with a name matching the dynamic DNS URL. As such, Golang offers a servername field that can be set to overwrite what value is used when checking against the certificate's common name (or subject alternative name). Without this change, Skip TLS Verify must be set to true in order for the DataSource to work, removing some of the benefits gained by using mutual TLS. This commit adds the ability to set Grafana's internal Golang TLS config servername field from the UI or a provisioned DataSource. The servername field is optional and the existing behavior is retained if the field is not set. Co-authored-by: Dana Pruitt <dpruitt@vmware.com> Co-authored-by: Jeremy Alvis <jalvis@pivotal.io> * Update docs with PR review changes Co-authored-by: Jeremy Alvis <jalvis@pivotal.io> Co-authored-by: Dana Pruitt <dpruitt@vmware.com> * Update with additional PR requested changes * Minor updates based on PR change requests Co-authored-by: Dana Pruitt <dpruitt@vmware.com> |
||
|---|---|---|
| .. | ||
| administration | ||
| alerting | ||
| auth | ||
| best-practices | ||
| dashboards | ||
| datasources | ||
| developers | ||
| enterprise | ||
| explore | ||
| getting-started | ||
| http_api | ||
| installation | ||
| linking | ||
| manage-users | ||
| panels | ||
| permissions | ||
| plugins | ||
| release-notes | ||
| shared | ||
| sharing | ||
| troubleshooting | ||
| variables | ||
| whatsnew | ||
| _index.md | ||
| menu.yaml | ||