wayfair-incubator / telefonistka

Safe and Controlled GitOps Promotion Across Environments/Failure-Domains
https://hub.docker.com/r/odedbenozer/telefonistka
MIT License
63 stars 7 forks source link

Allow skipping upstream TLS server certificate validation for the webhook proxy functionality #190

Closed Oded-B closed 4 months ago

Oded-B commented 4 months ago

Description

Allow skipping upstream TLS server certificate validation for the webhook proxy functionality Use-case: Handeling PKI to allow verification of TLS in in-cluster(k8s) services (https://argocd.argocd.svc.cluster.local) is hard. Some services don't provide an easy way to expose both TLS and plaintext endpoint without redirecting the traffic to the TLS endpoint and Webhook payloads are relitivly low risk so skipping TLS verification might make sense for some users.

Type of Change

Checklist