Add TLS verify to NATS (#1373)

aimichelle · web-flow · commit 25e065de7c00 · 2023-05-25T16:05:31.000-07:00
Summary: We were already using TLS for our NATS communications. This
option adds validation for the client certificate.

Relevant Issues: N/A

Type of change: /kind cleanup

Test Plan: Create a Vizier RC and deploy it to a cluster. Ensure that
everything continues running as expected.

Changelog Message:
```release-note
Add TLS verification to NATS.
```

Signed-off-by: Michelle Nguyen &lt;michellenguyen@pixielabs.ai&gt;
diff --git a/k8s/vizier_deps/base/nats/nats_statefulset.yaml b/k8s/vizier_deps/base/nats/nats_statefulset.yaml
@@ -32,6 +32,7 @@ data:
       cert_file: "/etc/nats-server-tls-certs/server.crt",
       key_file: "/etc/nats-server-tls-certs/server.key",
       timeout: 3
+      verify: true
     }
   # yamllint enable rule:indentation
 ---

Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,7 @@ data:`
`32`	`32`	`cert_file: "/etc/nats-server-tls-certs/server.crt",`
`33`	`33`	`key_file: "/etc/nats-server-tls-certs/server.key",`
`34`	`34`	`timeout: 3`
	`35`	`+ verify: true`
`35`	`36`	`}`
`36`	`37`	`# yamllint enable rule:indentation`
`37`	`38`	`---`