fix: adds SSL_ENABLED flag to start scylla cluster in ssl only mode

This adds SSL_ENABLED flag to Makefile, so that when you run
SSL_ENABLED=true make start-dev-env the scylla cluster will be created
with ssl_only config.

Makefile

@@ -20,6 +20,8 @@ SCYLLA_VERSION?=scylla:6.0.1
 IP_FAMILY?=IPV4
 RAFT_SCHEMA?=none
 TABLETS?=enabled
+# if true starts the scylla cluster with ssl only config
+SSL_ENABLED?=false
 
 MANAGER_CONFIG := testing/scylla-manager/scylla-manager.yaml
 PUBLIC_NET := 192.168.200.
@@ -171,7 +173,7 @@ start-dev-env: .testing-up deploy-agent build-cli
 
 .PHONY: .testing-up
 .testing-up:
-	@IPV6=$(IPV6) SCYLLA_VERSION=$(SCYLLA_VERSION) RAFT_SCHEMA=$(RAFT_SCHEMA) TABLETS=$(TABLETS) make -C testing build down up
+	@IPV6=$(IPV6) SCYLLA_VERSION=$(SCYLLA_VERSION) RAFT_SCHEMA=$(RAFT_SCHEMA) TABLETS=$(TABLETS) SSL_ENABLED=$(SSL_ENABLED) make -C testing build down up
 
 .PHONY: dev-env-status
 dev-env-status:  ## Checks status of docker containers and cluster nodes

README.md

@@ -81,6 +81,11 @@ for IPv6 environment:
 IPV6=true make start-dev-env
 ```
 
+for SSL scylla cluster:
+```bash
+SSL_ENABLED=true make start-dev-env
+```
+
 This command will:
 1. Build custom Scylla Docker image (testing/scylla)
 2. Compile server, agent and sctool binaries

testing/Makefile

@@ -62,8 +62,15 @@ up:
 	@echo "==> Generating encryption files"
 	@cd scylla/certs && ./generate.sh
 	@echo "==> Generating Scylla configuration"
+
+ifeq ($(SSL_ENABLED),true)
+	@cp scylla/config/scylla-ssl.yaml scylla/scylla.yaml
+	@cp scylla/config/cqlshrc-ssl scylla/cqlshrc
+else 
 	@cp scylla/config/scylla.yaml scylla/scylla.yaml
 	@cp scylla/config/cqlshrc scylla/cqlshrc
+endif
+
 ifeq ($(RAFT_SCHEMA),enabled)
 	@$(YQ) write -i scylla/scylla.yaml 'consistent_cluster_management' true
 endif
@@ -108,6 +115,9 @@ endif
 	@until [ 1 -le $$($(SM_NODETOOL) status | grep -c "UN") ]; do echo -n "."; sleep 2; done ; echo ""
 
 	@./nodes_exec "rm /root/.cqlshrc || true"
+	@./nodes_exec "mkdir -p /root/.cassandra" 
+	@./nodes_cp "scylla/cqlshrc" "/root/.cassandra/cqlshrc"
+
 	@echo "==> Adding Minio user"
 	./minio/add_user.sh || true
 	@echo "==> Initialising cluster"

testing/docker-compose.yaml

@@ -12,9 +12,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -32,9 +29,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -52,9 +46,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs/
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -72,9 +63,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -92,9 +80,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -112,9 +97,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -132,9 +114,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second:
@@ -152,9 +131,6 @@ services:
       - type: bind
         source: ./scylla/certs/
         target: /etc/scylla/certs
-      - type: bind
-        source: ./scylla/cqlshrc
-        target: /root/.cassandra/cqlshrc
     networks:
       public:
       second: