docs icon indicating copy to clipboard operation
docs copied to clipboard

Azure Redis Cache supports TSL, docs insists it doesn't

Open tmacam opened this issue 1 year ago • 0 comments

Describe the issue

When describing how to configure Redis for Azure, the docs state

Fill out necessary information and check the “Unblock port 6379” box, which will allow us to persist state without SSL.

This is problematic because Azure Redis Cache support TLS (that was the case before) but Redis Statestore component also does (since dapr/components-contrib#302 which dates 2020). This should have been updated by #491 but I guess it was overlooked.

Also, the docs reads:

NOTE: Dapr pub/sub uses Redis Streams that was introduced by Redis 5.0, which isn’t currently available on Azure Managed Redis Cache. Consequently, you can use Azure Managed Redis Cache only for state persistence.

Redis 6 is the minimum version for any new Redis instance now so this can be removed.

URL of the docs

https://docs.dapr.io/reference/components-reference/supported-state-stores/setup-redis/

Expected content

  • Remove mention to _"Unblock port 6379"_or "enable Non-TLS port" or "Allow access only via SSL: No" on Azure Cache for Redis setup or make it a note stating that TLS is the default and is more secure anyway.
  • Update Port to 6380
  • mention that "enableTLS: true" is required in the component spec.

Additional context

  • components-contrib#213

tmacam avatar Sep 15 '23 17:09 tmacam