Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for --insecure-skip-tls-verify flag on helm repo add command #1990

Merged
merged 2 commits into from
Dec 21, 2021
Merged

Add support for --insecure-skip-tls-verify flag on helm repo add command #1990

merged 2 commits into from
Dec 21, 2021

Conversation

BabisK
Copy link
Contributor

@BabisK BabisK commented Oct 14, 2021

This PR fixes #1871. It parses a new field in repositories named skipTlsVerify and if set to true, it appends --insecure-skip-tls-verify in helm repo add command.

This should be useful with internal self-signed repos, mitm proxies etc.

README.md Outdated
# Advanced configuration: You can skip the verification of TLS for an https repo
- name: skipTls
url: https://ss.my-insecure-domain.com
skipTlsVerify: true
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I prefer skipTLSVerify so that it is consistent with e.g. the existing tlsCACert. Let me do that change and merge this soon. Thank you for your patience and contribution!

@BabisK
Copy link
Contributor Author

BabisK commented Dec 20, 2021

Made the change everywhere to keep the code consistent. Should be ok

Copy link
Collaborator

@mumoshu mumoshu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks a lot for your contribution @BabisK!

I noticed something though- would you also need --insecure-skip-tls-verify on helm upgrade commands run by helmfile? Otherwise, you might end up failing on a chart download. Anyway, that's an another story. I'm merging this. Thanks again for your contribution!

@mumoshu mumoshu merged commit d34dc7b into roboll:master Dec 21, 2021
@BabisK
Copy link
Contributor Author

BabisK commented Dec 21, 2021

@mumoshu if I'm not mistaken, helmfile only calls helm upgrade both for upgrade and for install (with --install option). So this should suffice.

w33dw0r7d pushed a commit to w33dw0r7d/helmfile that referenced this pull request Mar 8, 2022
…and (roboll#1990)

Parses a new field in repositories named `skipTLSVerify` and if set to `true`, it appends `--insecure-skip-tls-verify` in `helm repo add` command.

This should be useful with internal self-signed repos, mitm proxies etc.

Resolves roboll#1871
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support --insecure-skip-tls-verify
2 participants