awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix ssl stuff

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-12-03 14:20:33 -08:00
parent e62705a81d
commit 02babcb3a5
1 changed files with 5 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
backend/src/ee/services/pam-resource/kubernetes/kubernetes-resource-factory.ts
View File

@@ -26,7 +26,7 @@ export const executeWithGateway = async <T>(
gatewayId: string;
},
gatewayV2Service: Pick<TGatewayV2ServiceFactory, "getPlatformConnectionDetailsByGatewayId">,
operation: (baseUrl: string, httpsAgent?: https.Agent) => Promise<T>
operation: (baseUrl: string, httpsAgent: https.Agent) => Promise<T>
): Promise<T> => {
const { connectionDetails, gatewayId } = config;
const url = new URL(connectionDetails.url);
@@ -46,23 +46,13 @@ export const executeWithGateway = async <T>(
targetHost,
targetPort
});
if (!platformConnectionDetails) {
throw new BadRequestError({ message: "Unable to connect to gateway, no platform connection details found" });
}
let httpsAgent: https.Agent | undefined;
if (connectionDetails.caCertificate) {
httpsAgent = new https.Agent({
ca: connectionDetails.caCertificate,
rejectUnauthorized: !connectionDetails.skipTLSVerify
});
} else if (!connectionDetails.skipTLSVerify) {
httpsAgent = new https.Agent({
rejectUnauthorized: true
});
}
const httpsAgent = new https.Agent({
ca: connectionDetails.sslCertificate,
rejectUnauthorized: connectionDetails.sslRejectUnauthorized
});
return withGatewayV2Proxy(
async (proxyPort) => {
const protocol = url.protocol === "https:" ? "https" : "http";