github/distribution
1
0
Fork 0
mirror of https://github.com/distribution/distribution.git synced 2026-07-16 16:59:52 +00:00
Code Issues Projects Releases Wiki Activity

Update Redis TLS configuration docs

Browse Source 
Updated TLS configuration parameters to indicate that 'certificate' and 'key' are optional for mTLS. Added notes and examples for server-side TLS and mutual TLS.

Signed-off-by: Omar Trigui <omar.trigui.tn@gmail.com>
This commit is contained in:
Omar Trigui
2026-01-24 00:31:02 +01:00
committed by GitHub
parent 6780dbbba4
commit e74754839e
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/content/about/configuration.md
View File

@@ -1087,11 +1087,21 @@ Use these settings to configure Redis TLS:
| Parameter | Required | Description |
|-----------|----------|-------------------------------------------------------|
| `certificate` | yes | Absolute path to the x509 certificate file. |
| `key` | yes | Absolute path to the x509 private key file. |
| `certificate` | no | Absolute path to the x509 client certificate file. Required for mTLS. |
| `key` | no | Absolute path to the x509 client private key file. Required for mTLS. |
| `rootcas` | no | An array of absolute paths to x509 CA files. |
**Note:** For server-side TLS only (e.g., AWS Elasticache), provide only `rootcas`. For mutual TLS (mTLS), provide both `certificate` and `key` along with optional `rootcas`.
```yaml
# Server-side TLS only (validate server certificate)
redis:
tls:
rootcas:
- /path/to/ca-bundle.crt
addrs: [localhost:6379]
# Mutual TLS (client and server certificates)
redis:
tls:
certificate: /path/to/cert.crt