bitnami / bitnami/sealed-secrets

--insecure-skip-tls-verify works only for K8s API connections

Open
#596 0 comments 1 reaction 0 assignees View on GitHub
backlog bug good first issue
Dominant language
Go
Stars
9.3k
Forks
776
Avg merge
1d 13h
Merged PRs (30d)
30

Description

I am fetching a cert from the sealed secrets like this:

```
kubeseal --raw --insecure-skip-tls-verify=true --from-file=foo.secret --cert https://sealed-secrets.my-ingress.com/v1/cert.pem --namespace team-a --name team-a-foo
```

The ingresses certificate is self signed. I expected `--insecure-skip-tls-verify` to ignore tls verification, but looking at the code of sealed-secrets, this flag is never used inside this project and is probably only passed down to K8s Go client.

I believe it should be an easy fix though - should this flag be used for both use cases? If yes, I can try to submit a quick fix.

Contributor guide

Open the contributing guide

Research direction

Start at the kubeseal command path for --raw and --insecure-skip-tls-verify, then trace how the --cert URL is fetched. Compare that path with the Kubernetes API connection path and verify the behavior using the self-signed sealed-secrets.my-ingress.com certificate described in the issue. Done means the flag's behavior is consistent for both connection types.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
cli, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.