github/distribution
1
0
Fork 0
mirror of https://github.com/distribution/distribution.git synced 2026-07-17 02:00:41 +00:00
Code Issues Projects Releases Wiki Activity

Enable Redis TLS without client certificates (#4770)

Browse Source
This commit is contained in:
Milos Gajdos
2026-03-27 09:35:39 -07:00
committed by GitHub
parent d4164c1edb e74754839e
commit 3e4f4a8bde
2 changed files with 19 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/content/about/configuration.md
View File

@@ -1087,11 +1087,21 @@ Use these settings to configure Redis TLS:
| Parameter | Required | Description |
|-----------|----------|-------------------------------------------------------|
| `certificate` | yes | Absolute path to the x509 certificate file. |
| `key` | yes | Absolute path to the x509 private key file. |
| `certificate` | no | Absolute path to the x509 client certificate file. Required for mTLS. |
| `key` | no | Absolute path to the x509 client private key file. Required for mTLS. |
| `rootcas` | no | An array of absolute paths to x509 CA files. |
**Note:** For server-side TLS only (e.g., AWS Elasticache), provide only `rootcas`. For mutual TLS (mTLS), provide both `certificate` and `key` along with optional `rootcas`.
```yaml
# Server-side TLS only (validate server certificate)
redis:
tls:
rootcas:
- /path/to/ca-bundle.crt
addrs: [localhost:6379]
# Mutual TLS (client and server certificates)
redis:
tls:
certificate: /path/to/cert.crt