Helm chart is not working if you use a TLS connection to mysql but with only the CA

[youest]

Hello there

💥  Actual behavior

I am trying to setup fleet using the helm chart. I want to use the TLS to connect to the AuroraDB.
I passed the CA pem file, but the migration script fails due to the fact it tries to find the FLEET_MYSQL_TLS_KEY and FLEET_MYSQL_TLS_CERT.

In this case, these files are optional. Checking the code in the Config and in the yaml

Conceptually they do not apply the same behaviour, am I missing something there?

[youest]

Sorry I fixed the link to the config method, it was wrong.

The fact is that helm chart checks for the {{- if .Values.mysql.tls.enabled }} flag to add all pem files, but sometimes the TLS Key and Cert are not useful, but it's not possible to not pass them.

Instead the Config class has different checks for each param, CA if t.TLSCert != "" and TLS key/cert if t.TLSCert != "" .

Let me know if I can provide more information.

[xpkoala]

Thank you for the update @youest! I'm getting some assistance from one of engineers to look at this issue and I'll hopefully have an update for you later today.

[xpkoala]

@rfairburn Do you recall discussing this ticket?