From 73d8df8fe6c1da64b3d3256f558ddd3a43c9ec6e Mon Sep 17 00:00:00 2001
From: Patrick Smith <patrick+dds@promptworks.com>
Date: Thu, 25 Oct 2018 14:32:46 -0400
Subject: [PATCH] Add REQUIRE_CRLS env variable to allow skipping loading CRLs

---
 atst/app.py                                         | 4 +++-
 deploy/kubernetes/atst-worker-envvars-configmap.yml | 8 ++++++++
 deploy/kubernetes/atst.yml                          | 2 ++
 3 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 deploy/kubernetes/atst-worker-envvars-configmap.yml

diff --git a/atst/app.py b/atst/app.py
index ac3ed9b3..273d3a86 100644
--- a/atst/app.py
+++ b/atst/app.py
@@ -28,6 +28,7 @@ from atst.queue import queue
 
 
 ENV = os.getenv("FLASK_ENV", "dev")
+REQUIRE_CRLS = os.getenv("REQUIRE_CRLS", "True")
 
 
 def make_app(config):
@@ -46,7 +47,8 @@ def make_app(config):
     app.config.update({"SESSION_REDIS": app.redis})
 
     make_flask_callbacks(app)
-    make_crl_validator(app)
+    if REQUIRE_CRLS == "True":
+        make_crl_validator(app)
     register_filters(app)
     make_eda_client(app)
     make_upload_storage(app)
diff --git a/deploy/kubernetes/atst-worker-envvars-configmap.yml b/deploy/kubernetes/atst-worker-envvars-configmap.yml
new file mode 100644
index 00000000..0f3ec5e8
--- /dev/null
+++ b/deploy/kubernetes/atst-worker-envvars-configmap.yml
@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: atst-worker-envvars
+  namespace: atat
+data:
+  REQUIRE_CRLS: "False"
diff --git a/deploy/kubernetes/atst.yml b/deploy/kubernetes/atst.yml
index b0824c1a..2526ac56 100644
--- a/deploy/kubernetes/atst.yml
+++ b/deploy/kubernetes/atst.yml
@@ -153,6 +153,8 @@ spec:
           envFrom:
           - configMapRef:
               name: atst-envvars
+          - configMapRef:
+              name: atst-worker-envvars
           volumeMounts:
             - name: atst-config
               mountPath: "/opt/atat/atst/atst-overrides.ini"