metashield can now trust system ca certificates if the operator doesn't provide any
@@ -99,6 +99,7 @@ func getClient(endpoint plugin.ShieldEndpoint) (*shield.Client, error) {
Session: token,
CACertificate: ca,
InsecureSkipVerify: ssl,
+ TrustSystemCAs: ca == "",
}, nil
}
