Merge pull request #1682 from saschagrunert/ca-optional

Make `--tls-ca` optional
kubernetes-sigs · Nov 13, 2024 · 4dc7922 · 4dc7922
2 parents a778f80 + 0a32657
commit 4dc7922
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cmd/crictl/exec.go b/cmd/crictl/exec.go
@@ -281,9 +281,9 @@ func tlsConfigFromFlags(ctx *cli.Context) (*rest.TLSClientConfig, error) {
 	if cfg.CAFile == "" && cfg.CertFile == "" && cfg.KeyFile == "" {
 		return &rest.TLSClientConfig{Insecure: true}, nil
 	}
-	if cfg.CAFile == "" || cfg.CertFile == "" || cfg.KeyFile == "" {
+	if cfg.CertFile == "" || cfg.KeyFile == "" {
 		return nil, fmt.Errorf(
-			"all three flags --%s, --%s and --%s are required for TLS streaming",
+			"all two flags --%s and --%s are required for TLS streaming, only --%s is optional",
 			flagTLSCA, flagTLSCert, flagTLSKey,
 		)
 	}