root: redis, make sure tlscacert isn't an empty string

[ilpianista]

Details

I'm provisioning Authentik via the Helm chart and I want to use Redis over TLS without CA validation:

authentik:
  redis:
    host: master.XYZ.euw1.cache.amazonaws.com
    tls: true
    tls_reqs: none

However, it's failing with:

"error":"open : no such file or directory","event":"Failed to append  to RootCAs

It looks like it got an empty string as tls ca cert and it tries to append that empty string to the rootcas. I think you can avoid that by ensuring the tls ca cert isn't an empty string.

---

Checklist

• Local tests pass (ak test authentik/)
• The code has been formatted (make lint-fix)

If an API change has been made

• The API schema has been updated (make gen-build)

If changes to the frontend have been made

• The code has been formatted (make web)

If applicable

• The documentation has been updated
• The documentation has been formatted (make website)

[netlify]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	9b1639a
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/6763d399701dd50008e0ec4a

[netlify]

✅ Deploy Preview for authentik-storybook canceled.

Name	Link
🔨 Latest commit	9b1639a
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/6763d399a76c1900083a3edc

[rissson]

Just tried this out, and indeed TLSCaCert is filled with an empty string instead of being nil. I'd rather find out why that happens instead of changing how we do the comparison. Otherwise, we can change the type to string instead of *string and compare to empty string.

@BeryJu thoughts?

[ilpianista]

I'd rather find out why that happens instead of changing how we do the comparison.

I suspect this is caused by the overwrite field info when the env var isn't set.