Merge pull request #1610 from spjmurray/system_ca_pool

✨ Allow Use of Public CAs
kubernetes-sigs · Jul 19, 2023 · 88a3a1d · 88a3a1d
2 parents 2856f63 + 0249663
commit 88a3a1d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/scope/provider.go b/pkg/scope/provider.go
@@ -153,13 +153,13 @@ func NewProviderClient(cloud clientconfig.Cloud, caCert []byte, logger logr.Logg
 	}
 
 	config := &tls.Config{
-		RootCAs:    x509.NewCertPool(),
 		MinVersion: tls.VersionTLS12,
 	}
 	if cloud.Verify != nil {
 		config.InsecureSkipVerify = !*cloud.Verify
 	}
 	if caCert != nil {
+		config.RootCAs = x509.NewCertPool()
 		config.RootCAs.AppendCertsFromPEM(caCert)
 	}