Sebastian-Pietrzak opened a new issue, #11141:
URL: https://github.com/apache/apisix/issues/11141

   ### Current Behavior
   
   I'm struggling with adding certificate with /ssls admin endpoint using env 
reference.
   ```
   curl --location --request PUT 'http://127.0.0.1:9180/apisix/admin/ssls' \
   --header 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' \
   --header 'Content-Type: application/json' \
   --data '{
       "id":  "some_id",
       "type": "server",
       "snis": ["localhost"],
       "cert": "$ENV://APISIX_ENV_CERT",
       "key": "$ENV://APISIX_ENV_KEY",
       "ssl_protocols": ["TLSv1.2", "TLSv1.3"]
     }'
   ```
   I'm always getting this, no matter what I put inside cert/key fields unless 
they are proper certs.
   ```
   {
       "error_msg": "invalid configuration: property \"key\" validation failed: 
value should match only one schema, but matches none"
   }
   ```
   Accordingly to [admin api 
documentation](https://apisix.apache.org/docs/apisix/admin-api/#request-body-parameters-4)
 those fields support those env references, but it seems it's not the case. 
Note: I'm using such env reference in key-auth plugin and it works just fine, 
but here it seems like it doesn't expect any other pattern than cert, and 
message/logs are not helpful.
   
   ### Expected Behavior
   
   It's possible to setup ssls and provide cert location as env reference.
   
   ### Error Logs
   
   _No response_
   
   ### Steps to Reproduce
   
   Send following request to admin-api:
   ```
   curl --location --request PUT 'http://127.0.0.1:9180/apisix/admin/ssls' \
   --header 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' \
   --header 'Content-Type: application/json' \
   --data '{
       "id":  "some_id",
       "type": "server",
       "snis": ["localhost"],
       "cert": "$ENV://APISIX_ENV_CERT",
       "key": "$ENV://APISIX_ENV_KEY",
       "ssl_protocols": ["TLSv1.2", "TLSv1.3"]
     }'
   ```
   
   ### Environment
   
   - APISIX version (run `apisix version`): 3.7.0
   - Operating system (run `uname -a`): Linux 4091912aa453 6.6.16-linuxkit #1 
SMP Fri Feb 16 11:54:02 UTC 2024 x86_64 GNU/Linux
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): n/a
   - etcd version, if relevant (run `curl 
http://127.0.0.1:9090/v1/server_info`): 3.5.9
   - APISIX Dashboard version, if relevant: n/a
   - Plugin runner version, for issues related to plugin runners: n/a
   - LuaRocks version, for installation issues (run `luarocks --version`): n/a
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to