You can globally ignore the TLS checks:
# static config, for all internal connections
serversTransport:
insecureSkipVerify: true
or add the required certificates:
# static config, for all internal connections
serversTransport:
rootCAs:
- foo.crt
- bar.crt
Or you can do it per service: define a serverstransport
in a dynamic config, use insecureskipverify or rootcas.
In this case you need to load the dynamic config from a file via provider.file
, then don't forget to assign it to your service:
http:
services:
Service01:
loadBalancer:
serversTransport: mytransport