Skip to content

Deprecate usage of --insecure-skip-verify=true across test environments #1268

Open
@anmazzotti

Description

@anmazzotti

In e2e and dev-env (and quickstart script), we use --set rancherTurtles.managerArguments[0]=--insecure-skip-verify=true"} when installing Turtles.

This has the very nice effect that Cluster import always works without problems.
However we may want to surface problems in most cases and this is not close to anything production like.

A valid alternative should be to use the new agent-tls-mode feature gate, which should also work with self signed Rancher CA when agent-tls-mode is Strict (default)

This should be verified and if so the insecure-skip-verify option should be removed from all the environments.
Possibly this could deserve some specific documentation page to clarify how exactly the Rancher agent-tls-mode is supported by Turtles and what effects does it have (for example when importing/installing the cattle-cluster-agent).

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/testingIndicates an issue related to testkind/cleanupCategorizes issue or PR as related to cleaning up code, process, or technical debt.squad/turtles

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions