Giters

grafana / k6-jslib-aws

Javascript Library allowing to interact with AWS resources from k6 scripts

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

RFE: ability to add custom cert or disable cert validation in S3 endpoint

rgordill opened this issue · comments

commented

Hi.

When using the s3.js functions, if the s3 endpoint is an internal one with custom certs, it throws an error:

level=warning msg="Request Failed" error="Put "[https://s3.internal.com:443/k6-s3/results-1-0.json](https://s3.internal.com/k6-s3/results-1-0.json%5C)": tls: failed to verify certificate: x509: certificate signed by unknown authority"

This is an usual situation when using minio, ceph rgw, etc. We need an option to disable cert validation (non sensible envs) or add custom certs to validate them correctly.

commented

Hi @rgordill,

First of all, sorry for the delayed answer 🙏🏻

That being said, I'd like to ask you: have you tried with either Insecure skip TLS verify or TLS auth k6 options?

If I'm not wrong, the S3Client relies on standard k6 http client (see here and its usages), and as explained here, these are the options to configure TLS.

Thanks!

commented

Hi, @joanlopez.

Yes, I made it working by disabling validation globally with the procedure you have mentioned. But IMHO, there should be a particular configuration that impacts only to the S3Client, while we use the former workaround.

Thanks