apalia / cloudstack-csi-driver

Container Storage Interface (CSI) plugin for Apache CloudStack
Apache License 2.0
10 stars 19 forks source link

Even with ssl-no-verify set to true it fails when using dev env with invalid CA #10

Open memorais opened 1 year ago

memorais commented 1 year ago

I've set ssl-no-verify to true and cloudstack-csi-node keeps failing with "x509: certificate signed by unknown authority".

{"level":"error","ts":1676836723.6888514,"caller":"zap/options.go:212","msg":"finished unary call with code Internal","grpc.start_time":"2023-02-19T19:58:43Z","grpc.request.deadline":"2023-02-19T20:00:43Z","system":"grpc","span.kind":"server","grpc.service":"csi.v1.Node","grpc.method":"NodeGetInfo","error":"rpc error: code = Internal desc = Get \"https://acs.dev.demo/client/api?apiKey=97u7g83cRb_rIs3Ufh_640zKCXbKf1jq6XN9901ysHlBiHNjP_AwdUcI5KVtRu7fToI4ERkLAx4UiZF1KvRF5w&command=listVirtualMachines&id=1a826036-ac51-4370-bfa0-aa96d0566b83&response=json&signature=ktUN7KXMwcSZRdeblbFtVgN9Gco%3D\": x509: certificate signed by unknown authority","grpc.code":"Internal","grpc.time_ms":25.14699935913086,"stacktrace":"github.com/grpc-ecosystem/go-grpc-middleware/logging/zap.DefaultMessageProducer\n\t/home/runner/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/logging/zap/options.go:212\ngithub.com/grpc-ecosystem/go-grpc-middleware/logging/zap.UnaryServerInterceptor.func1\n\t/home/runner/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/logging/zap/server_interceptors.go:39\ngithub.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1\n\t/home/runner/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25\ngithub.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1\n\t/home/runner/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:34\ngithub.com/container-storage-interface/spec/lib/go/csi._Node_NodeGetInfo_Handler\n\t/home/runner/go/pkg/mod/github.com/container-storage-interface/spec@v1.5.0/lib/go/csi/csi.pb.go:6238\ngoogle.golang.org/grpc.(*Server).processUnaryRPC\n\t/home/runner/go/pkg/mod/google.golang.org/grpc@v1.39.0/server.go:1292\ngoogle.golang.org/grpc.(*Server).handleStream\n\t/home/runner/go/pkg/mod/google.golang.org/grpc@v1.39.0/server.go:1617\ngoogle.golang.org/grpc.(*Server).serveStreams.func1.2\n\t/home/runner/go/pkg/mod/google.golang.org/grpc@v1.39.0/server.go:940"}

There is any other way to disable TLS verification?