set transport to skip verify if se skip flag passed (k3s-io#4102)

Signed-off-by: Brian Downs <brian.downs@gmail.com>
briandowns · Sep 28, 2021 · a677f74 · a677f74
1 parent bc6ad5a
commit a677f74
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/pkg/etcd/s3.go b/pkg/etcd/s3.go
@@ -36,12 +36,18 @@ type s3 struct {
 // a new Minio client.
 func newS3(ctx context.Context, config *config.Control) (*s3, error) {
 	tr := http.DefaultTransport
-	if config.EtcdS3EndpointCA != "" {
+
+	switch {
+	case config.EtcdS3EndpointCA != "":
 		trCA, err := setTransportCA(tr, config.EtcdS3EndpointCA, config.EtcdS3SkipSSLVerify)
 		if err != nil {
 			return nil, err
 		}
 		tr = trCA
+	case config.EtcdS3 && config.EtcdS3SkipSSLVerify:
+		tr.(*http.Transport).TLSClientConfig = &tls.Config{
+			InsecureSkipVerify: config.EtcdS3SkipSSLVerify,
+		}
 	}
 
 	var creds *credentials.Credentials