How to disable TLS¶

To follow this guide, you need to have a running Charmed MySQL cluster with TLS enabled. See How to enable TLS for more information. In general, to disable encryption with TLS, remove the relation between Charmed MySQL and the TLS provider.

juju status --relations

> Integration provider                   Requirer                   Interface         Type     Message
> mysql:database-peers                   mysql:database-peers       mysql_peers       peer
> mysql:rolling-ops                      mysql:rolling-ops          rolling_op        peer
> self-signed-certificates:certificates  mysql:client-certificates  tls-certificates  regular
> self-signed-certificates:certificates  mysql:peer-certificates    tls-certificates  regular

K8s

juju status --relations

> Integration provider                   Requirer                      Interface         Type     Message
> mysql-k8s:database-peers               mysql-k8s:database-peers      mysql_peers       peer
> mysql-k8s:rolling-ops                  mysql-k8s:rolling-ops         rolling_op        peer
> self-signed-certificates:certificates  mysql-k8s:client-certificates tls-certificates  regular
> self-signed-certificates:certificates  mysql-k8s:peer-certificates   tls-certificates  regular

Disable client-to-server encryption¶

Separate the certificates charm and the Charmed MySQL application on the client-certificates endpoint:

juju remove-relation self-signed-certificates mysql:client-certificates

K8s

juju remove-relation self-signed-certificates mysql-k8s:client-certificates

Disable peer-to-peer encryption¶

Separate the certificates charm and the Charmed MySQL application on the peer-certificates endpoint:

juju remove-relation self-signed-certificates mysql:peer-certificates

K8s

juju remove-relation self-signed-certificates mysql-k8s:peer-certificates