Skip to content

add insecure-skip-tls-verify flag to jx gitops helm release #991

@iMckify

Description

@iMckify

Missing insecure-skip-tls-verify flag in command jx gitops helm release, so jx gitops helm release could not be used in minikube cluster for local development/tryout.

Command jx gitops helm release internally runs helm push command, however jx gitops helm release does not support the flag like helm push --insecure-skip-tls-verify does.
This bug causes error tls: failed to verify certificate: x509: certificate is valid for ingress.local.
If flag would be added, docker-registry-jx could be used to store application promotion charts instead of the bucketrepo-jx.

jx-requirements.yml
cluster:
chartKind: oci
chartRepository: docker-registry-jx.A.B.C.D.nip.io

app pipeline:

        - image: ghcr.io/jenkins-x/jx-boot:3.11.3
          name: promote-helm-release
          resources: {}
          script: |
            #!/usr/bin/env sh
            source .jx/variables.sh
            jx gitops helm release --oci --no-oci-login --repo-url $JX_CHART_REPOSITORY --version $VERSION

app pipeline does not work due to error tls: failed to verify certificate: x509: certificate is valid for ingress.local
to fix the error internal helm push command triggered by jx gitops helm release must use flag --insecure-skip-tls-verify.

working app pipeline:

        - image: ghcr.io/jenkins-x/jx-boot:3.11.3
          name: promote-helm-release
          resources: {}
          script: |
            #!/usr/bin/env sh
            source .jx/variables.sh
            
            OCI_REGISTRY=docker-registry-jx.$DOMAIN
            echo "Logging into OCI registry with insecure TLS skip..."
            echo admin | helm registry login $OCI_REGISTRY --username admin --password-stdin --insecure
            
            echo "Packaging Helm chart..."
            CHART_DIR=./charts/$APP_NAME
            helm package $CHART_DIR --version $VERSION

            echo "Pushing Helm chart to OCI registry over HTTP..."
            helm push ./$APP_NAME-$VERSION.tgz oci://$OCI_REGISTRY/charts --insecure-skip-tls-verify --debug

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions