@codefresh-io/service-base 3.0.25 → 3.0.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/infra/config.js +14 -1
- package/package.json +1 -1
package/infra/config.js
CHANGED
|
@@ -140,9 +140,22 @@ base.redis = {
|
|
|
140
140
|
port: process.env.REDIS_PORT || 6379,
|
|
141
141
|
password: process.env.REDIS_PASSWORD || 'redisPassword',
|
|
142
142
|
db: process.env.REDIS_DB || 1,
|
|
143
|
-
tls: process.env.REDIS_TLS === 'true' ? {} : undefined,
|
|
144
143
|
};
|
|
145
144
|
|
|
145
|
+
if (process.env.REDIS_TLS === 'true') {
|
|
146
|
+
if (process.env.REDIS_CLIENT_CERT_PATH && process.env.REDIS_CA_PATH && process.env.REDIS_CLIENT_KEY_PATH) {
|
|
147
|
+
const redisCaCredentials = fs.readFileSync(process.env.REDIS_CA_PATH);
|
|
148
|
+
const redisCertCredentials = fs.readFileSync(process.env.REDIS_CLIENT_CERT_PATH);
|
|
149
|
+
const redisKeyCredentials = fs.readFileSync(process.env.REDIS_CLIENT_KEY_PATH);
|
|
150
|
+
_.set(base, 'redis.tls.ca', redisCaCredentials);
|
|
151
|
+
_.set(base, 'redis.tls.cert', redisCertCredentials);
|
|
152
|
+
_.set(base, 'redis.tls.key', redisKeyCredentials);
|
|
153
|
+
// if not passing rejectUnauthorized -- default value set to true
|
|
154
|
+
_.set(base, 'redis.tls.rejectUnauthorized', process.env.REDIS_REJECT_UNAUTHORIZED !== 'false');
|
|
155
|
+
} else {
|
|
156
|
+
base.redis.tls = {};
|
|
157
|
+
}
|
|
158
|
+
}
|
|
146
159
|
|
|
147
160
|
// This timers are associated with termination signals the service should handle
|
|
148
161
|
// 1. The grace period should first of all know that no more requests will be forward to the process
|