watch: Support self-signed certificates

mkokho / kubemrr

For blazingly fast kubernets ops

Apache License 2.0

143 stars 6 forks source link

watch: Support self-signed certificates #3

Closed brianmartin closed 7 years ago

brianmartin commented 7 years ago

I'm very excited about this tool. Our dev cluster is using a self-signed certificate though.

It would be nice to have a --no-verify flag for watch.

Currently get:

x509: certificate signed by unknown authority

mkokho commented 7 years ago

Okay, I will add it after the weekend. Not because I'm lazy, but because I will be away from the computer ;)

brianmartin commented 7 years ago

@mkokho Awesome, much appreciated. (Eventually I'll make myself useful by getting up-to-speed on Go :p)

mkokho commented 7 years ago

@brianmartin, please try the binary from this tag: https://github.com/mkokho/kubemrr/tree/v1.2.0-beta1

I have disabled verification by default because it seems strange for me that a Kube API Server can be visible to a public network. Please, correct me if I'm missing something, and I will add --no-verify flag.

brianmartin commented 7 years ago

@mkokho Hey, I really appreciate the changes. I have tested and verified that the transport layer is now working.

mkokho commented 7 years ago

Small change in v1.2.0, comparing to v1.2.0-beta:

verification is now configured by field insecure-skip-tls-verify in kubeconfig file, like this:
```
clusters:
```
name: cluster_2 cluster: server: https://bar.com certificate-authority: ca2 insecure-skip-tls-verify: true