Infisical / infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
https://infisical.com
Other
13k stars 677 forks source link

[ENG-245] [Kubernetes Operator] Allow to skip tls verification of infisical app. #1179

Open SebastienTolron opened 7 months ago

SebastienTolron commented 7 months ago

Hi ,

First of all , thanks for the great Job.

I installed fisical on premise and also installed Kubernetes operator.

My url is secure with a custom root CA. So i can't create a secret in Kube

failed to get secrets because [err=unable to get service token details. [err=CallGetServiceTokenDetails: Unable to complete api request [err=Get "https://infisical.sb-a.mydomain.local/api/v2/service-token": x509: certificate signed by unknown authority]]]]. Will requeue after [requeueTime=1m0s]

Is there any option to import a custom root CA or to add a flag to skip this tls verification.

Thanks

Regards

From SyncLinear.com | ENG-245

akhilmhdh commented 7 months ago

CC: @maidul98

maidul98 commented 7 months ago

@Stolr There currently isn't a way to pass in a custom CA. We can look into how we can pass in a flag to skip this check during requests. We use Resty for our requests and it looks like they have a InsecureSkipVerify boolean we can set