Skip to content

Use correct hostname and TLS configs#228

Merged
nicklan merged 3 commits intodatabricks:masterfrom
madeline-shao-db:fix-tls-server-name
Aug 22, 2025
Merged

Use correct hostname and TLS configs#228
nicklan merged 3 commits intodatabricks:masterfrom
madeline-shao-db:fix-tls-server-name

Conversation

@madeline-shao-db
Copy link
Contributor

@madeline-shao-db madeline-shao-db commented Aug 21, 2025

Currently click sets the TLS server name as the hostname instead of just using it for TLS verification. Implement a way of specifying a name only for TLS verification through a custom resolver.

Manually tested with cargo run

Copy link
Collaborator

@nicklan nicklan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

one comment, also you need to format the code. I will see if i can fix the clippy warning which will also block you

src/k8s.rs Outdated
connect_timeout_secs: u32,
read_timeout_secs: u32,
custom_dns_mapping: Option<(String, IpAddr)>,
tls_server_name: Option<String>,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't seem to actually be used. You pass it around a bunch, and it seemed you wanted to use it in get_client, but for now you're not so maybe we can just remove it?

src/k8s.rs Outdated
connect_timeout_secs: u32,
read_timeout_secs: u32,
custom_dns_mapping: Option<(String, IpAddr)>,
_tls_server_name: Option<String>,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

likewise let's remove this arg

@nicklan
Copy link
Collaborator

nicklan commented Aug 22, 2025

also please run cargo test locally, it looks like at least config::kube::tests::ensure_tls_server_name is failing

@nicklan nicklan merged commit 8673b0e into databricks:master Aug 22, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants