Chris Lu 2919bb27e5 fix(sync): use per-cluster TLS for HTTP volume connections in filer.sync (#8974) ...

* fix(sync): use per-cluster TLS for HTTP volume connections in filer.sync (#8965)

When filer.sync runs with -a.security and -b.security flags, only gRPC
connections received per-cluster TLS configuration. HTTP clients for
volume server reads and uploads used a global singleton with the default
security.toml, causing TLS verification failures when clusters use
different self-signed certificates.

Load per-cluster HTTPS client config from the security files and pass
dedicated HTTP clients to FilerSource (for downloads) and FilerSink
(for uploads) so each direction uses the correct cluster's certificates.

* fix(sync): address review feedback for per-cluster HTTP TLS

- Add insecure_skip_verify support to NewHttpClientWithTLS and read it
  from per-cluster security config via https.client.insecure_skip_verify
- Error on partial mTLS config (cert without key or vice versa)
- Add nil-check for client parameter in DownloadFileWithClient
- Document SetUploader as init-only (same pattern as SetChunkConcurrency)

2026-04-07 14:11:44 -07:00

..

filer_source_test.go

fix(replication): resume partial chunk reads on EOF instead of re-downloading (#8607)

2026-03-11 22:38:22 -07:00

filer_source.go

fix(sync): use per-cluster TLS for HTTP volume connections in filer.sync (#8974)

2026-04-07 14:11:44 -07:00