search

GoogleCloudPlatform / netd

netd: GKE Networking Daemonset
Apache License 2.0
54 stars 41 forks source link

install-cni.sh should use cacert instead of --insecure #93

Open anfernee opened 4 years ago

anfernee commented 4 years ago

https://github.com/GoogleCloudPlatform/netd/blob/6cd97fdcb3290114cacc2023132bbee7753f9bb5/scripts/install-cni.sh#L75-L79

we are using curl -k which is insecure. We should use --cacert with the ca cert in the same folder as token file.

anfernee commented 4 years ago

cc @bcheung