fix: create empty tls.Config when loading extraCA fails

Signed-off-by: Clément Nussbaumer <[email protected]>
postfinance · Jan 12, 2024 · 4113065 · 4113065
1 parent fec132d
commit 4113065
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/internal/servicecheck/servicecheck.go b/internal/servicecheck/servicecheck.go
@@ -3,6 +3,7 @@ package servicecheck
 
 import (
 	"context"
+	"crypto/tls"
 	"fmt"
 	"log"
 	"net"
@@ -51,6 +52,7 @@ func New(_ context.Context, discovery *kubediscovery.Client, promRegistry *prome
 	tlsConfig, err := generateTLSConfig(os.Getenv("KUBENURSE_EXTRA_CA"))
 	if err != nil {
 		log.Printf("cannot generate tlsConfig with KUBENURSE_EXTRA_CA: %s", err)
+		tlsConfig = &tls.Config{}
 	}
 
 	tlsConfig.InsecureSkipVerify = os.Getenv("KUBENURSE_INSECURE") == "true"