Add message explaining this hack

Signed-off-by: Jorge Turrado <jorge.turrado@docplanner.com>
kedacore · Nov 25, 2021 · b064a60 · b064a60
1 parent 6523063
commit b064a60
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/util/tls_config.go b/pkg/util/tls_config.go
@@ -25,6 +25,8 @@ import (
 // NewTLSConfig returns a *tls.Config using the given ceClient cert, ceClient key,
 // and CA certificate. If none are appropriate, a nil *tls.Config is returned.
 func NewTLSConfig(clientCert, clientKey, caCert string) (*tls.Config, error) {
+	// skipVerify := true is a hack to avoid the CodeQL error related with allowing insecure certificates in production environments.
+	// It's in necessary and intended in our use case in order to be able to trust in the CA
 	skipVerify := true
 	valid := false