From ace008f44ed58dc1d0a551b3d4abc33a5dd46b73 Mon Sep 17 00:00:00 2001
From: Tuan Dang <dangtony98@gmail.com>
Date: Tue, 14 May 2024 22:49:37 -0700
Subject: [PATCH] Make rejectUnauthorized true if ca cert is passed for k8s
 auth method

---
 .../identity-kubernetes-auth-service.ts                   | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts b/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
index d74f5b7b0..8ee8c36bd 100644
--- a/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
+++ b/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
@@ -115,11 +115,9 @@ export const identityKubernetesAuthServiceFactory = ({
           "Content-Type": "application/json",
           Authorization: `Bearer ${tokenReviewerJwt}`
         },
-        ...(caCert && {
-          httpsAgent: new https.Agent({
-            ca: caCert,
-            rejectUnauthorized: true
-          })
+        httpsAgent: new https.Agent({
+          ca: caCert,
+          rejectUnauthorized: !!caCert
         })
       }
     );