Description
In e2e and dev-env (and quickstart script), we use --set rancherTurtles.managerArguments[0]=--insecure-skip-verify=true"}
when installing Turtles.
This has the very nice effect that Cluster import always works without problems.
However we may want to surface problems in most cases and this is not close to anything production like.
A valid alternative should be to use the new agent-tls-mode
feature gate, which should also work with self signed Rancher CA when agent-tls-mode
is Strict
(default)
This should be verified and if so the insecure-skip-verify option should be removed from all the environments.
Possibly this could deserve some specific documentation page to clarify how exactly the Rancher agent-tls-mode
is supported by Turtles and what effects does it have (for example when importing/installing the cattle-cluster-agent).