K8s: enable insecure to skip server cert validation for now (#84038)

This commit is contained in:
Charandas 2024-03-11 16:13:14 -07:00 committed by GitHub
parent 6c5e94095d
commit da327ce807
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -146,7 +146,10 @@ func CreateAggregatorConfig(commandOptions *options.Options, sharedConfig generi
}
remoteServicesConfig := &RemoteServicesConfig{
InsecureSkipTLSVerify: commandOptions.ExtraOptions.DevMode,
// TODO: in practice, we should only use the insecure flag when commandOptions.ExtraOptions.DevMode == true
// But given the bug in K8s, we are forced to set it to true until the below PR is merged and available
// https://github.com/kubernetes/kubernetes/pull/123808
InsecureSkipTLSVerify: true,
ExternalNamesNamespace: externalNamesNamespace,
CABundle: caBundlePEM,
Services: remoteServices,