diff --git a/etcdmain/grpc_proxy.go b/etcdmain/grpc_proxy.go index 7cbe43190..184436027 100644 --- a/etcdmain/grpc_proxy.go +++ b/etcdmain/grpc_proxy.go @@ -267,6 +267,9 @@ func newClientCfg(eps []string) (*clientv3.Config, error) { return nil, err } clientTLS.InsecureSkipVerify = grpcProxyInsecureSkipTLSVerify + if clientTLS.InsecureSkipVerify { + lg.Warn("--insecure-skip-tls-verify was given, this grpc proxy process skips authentication of etcd server TLS certificates. This option should be enabled only for testing purposes.") + } cfg.TLS = clientTLS plog.Infof("ClientTLS: %s", tls) }