KEDA Metrics API - Ignore Certificate Errors

[wymangr]

I'm trying to setup the Metrics API KEDA scaler. I have an internal API setup with a self signed certificate, but when I deploy it I'm getting the following error:

Warning  KEDAScalerFailed    11s                keda-operator  Get "https://api.com/aks_autoscaler": x509: certificate has expired or is not yet valid

I was wondering if there was a way to ignore certificate errors with this scaler?

here is my setup:

apiVersion: keda.sh/v1alpha1
kind: ScaledObject
metadata:
  name: appraisals-scale
  namespace: app
  labels:
    app: app_name
spec:
  maxReplicaCount: 12
  scaleTargetRef:
    name: app_name
  triggers:
    - type: metrics-api
      metadata:
        targetValue: "7"
        url: "https://api.com/aks_autoscaler"
        valueLocation: 'value'

[tomkerkhove]

@zroubalik Can we do this? If so, we might want to document this in our FAQ

[wymangr]

Looking through the code, I don't think it will currently work. I believe it could be done by adding this to the tls config;

InsecureSkipVerify: true

If confirmed it's not possible, maybe it's worth a feature request?

[wymangr]

It does look like the influxdb and elasticsearch scalers have this option.

[zroubalik]

@wymangr agree, this is useful feature (to make this optional and default to the current behavior). Willing to contribute this? It should be pretty trivial.

[wymangr]

@zroubalik opened up PR #3823 and Docs PR 972