Skip to content

ssl for inmem redis#10242

Open
vj-hubs wants to merge 7 commits intocvat-ai:developfrom
vj-hubs:feat/redis-ssl-support
Open

ssl for inmem redis#10242
vj-hubs wants to merge 7 commits intocvat-ai:developfrom
vj-hubs:feat/redis-ssl-support

Conversation

@vj-hubs
Copy link

@vj-hubs vj-hubs commented Jan 30, 2026

Motivation and context

Problem

CVAT cannot connect to Redis instances that require TLS/SSL (like AWS ElastiCache with transit_encryption_enabled). The Redis client settings don't include SSL configuration options.

Solution

Added SSL/TLS support for in-memory Redis (used for RQ job queues)

Files Changed

cvat/settings/base.py:

  • Added CVAT_REDIS_INMEM_SSL environment variable (default: false)
  • Added SSL and SSL_CERT_REQS to REDIS_INMEM_SETTINGS for django-rq
  • Updated CACHE to use rediss:// scheme when SSL is enabled

helm-chart/values.yaml:

  • Added redis.ssl.enabled option (default: false)

helm-chart/templates/_helpers.tpl:

  • Added CVAT_REDIS_INMEM_SSL environment variable to backend pods

Usage

To enable Redis SSL, set the environment variable or Helm value:

# values.override.yaml
redis:
  ssl:
    enabled: true

How has this been tested?

Checklist

  • I submit my changes into the develop branch
  • I have created a changelog fragment
  • I have updated the documentation accordingly
  • I have added tests to cover my changes
  • I have linked related issues (see GitHub docs)

License

  • I submit my code changes under the same MIT License that covers the project.
    Feel free to contact the maintainers if that's a concern.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant