Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add insecure-skip-tls-verify flag to jx gitops helm release #991

Open
iMckify opened this issue Dec 17, 2024 · 0 comments
Open

add insecure-skip-tls-verify flag to jx gitops helm release #991

iMckify opened this issue Dec 17, 2024 · 0 comments

Comments

@iMckify
Copy link

iMckify commented Dec 17, 2024

Missing insecure-skip-tls-verify flag in command jx gitops helm release, so jx gitops helm release could not be used in minikube cluster for local development/tryout.

Command jx gitops helm release internally runs helm push command, however jx gitops helm release does not support the flag like helm push --insecure-skip-tls-verify does.
This bug causes error tls: failed to verify certificate: x509: certificate is valid for ingress.local.
If flag would be added, docker-registry-jx could be used to store application promotion charts instead of the bucketrepo-jx.

jx-requirements.yml
cluster:
chartKind: oci
chartRepository: docker-registry-jx.A.B.C.D.nip.io

app pipeline:

        - image: ghcr.io/jenkins-x/jx-boot:3.11.3
          name: promote-helm-release
          resources: {}
          script: |
            #!/usr/bin/env sh
            source .jx/variables.sh
            jx gitops helm release --oci --no-oci-login --repo-url $JX_CHART_REPOSITORY --version $VERSION

app pipeline does not work due to error tls: failed to verify certificate: x509: certificate is valid for ingress.local
to fix the error internal helm push command triggered by jx gitops helm release must use flag --insecure-skip-tls-verify.

working app pipeline:

        - image: ghcr.io/jenkins-x/jx-boot:3.11.3
          name: promote-helm-release
          resources: {}
          script: |
            #!/usr/bin/env sh
            source .jx/variables.sh
            
            OCI_REGISTRY=docker-registry-jx.$DOMAIN
            echo "Logging into OCI registry with insecure TLS skip..."
            echo admin | helm registry login $OCI_REGISTRY --username admin --password-stdin --insecure
            
            echo "Packaging Helm chart..."
            CHART_DIR=./charts/$APP_NAME
            helm package $CHART_DIR --version $VERSION

            echo "Pushing Helm chart to OCI registry over HTTP..."
            helm push ./$APP_NAME-$VERSION.tgz oci://$OCI_REGISTRY/charts --insecure-skip-tls-verify --debug
@iMckify iMckify changed the title add insecure-skip-tls-verify flag add insecure-skip-tls-verify flag to jx gitops helm release Dec 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant