Merge pull request #1986 from coreos-inc/external-tls

Add option to properly handle external TLS

util/config/validator.py

@@ -242,9 +242,15 @@ def _validate_google_login(config, _):
 
 def _validate_ssl(config, _):
   """ Validates the SSL configuration (if enabled). """
+
+  # Skip if non-SSL.
   if config.get('PREFERRED_URL_SCHEME', 'http') != 'https':
     return
 
+  # Skip if externally terminated.
+  if config.get('EXTERNAL_TLS_TERMINATION', False) == True:
+    return
+
   for filename in SSL_FILENAMES:
     if not config_provider.volume_file_exists(filename):
       raise Exception('Missing required SSL file: %s' % filename)