Does anyone know how to disable certificate verification from the frontend to an SSL/TLS enabled GMS server? I have this error message:

Caused by: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <datahub-gms-main-tls-service.datahub.svc.cluster.local> doesn't match any of the subject alternative names: [staging.svc.eqiad.wmnet, staging.svc.codfw.wmnet]

@incalculable-ocean-74010 @early-lamp-41924 ^

It's not so important now. I've got around this particular problem by issuing a new certificate. I think it would still be a useful feature, but it's no longer critical for me to solve right now. 🙂

Thanks for the followup Ben! I'm assuming you are trying to add a self-signed certificate to the GMS pod?

Thanks John. Yes, still using a self-signed certificate with the GMS reverse proxy, but the validation is not an issue any more.