Skip to content

fix: Honor insecure TLS for charts and referrers - #76

Open
immanuwell wants to merge 1 commit into
fluxcd:mainfrom
immanuwell:fix/insecure-registry-tls
Open

immanuwell wants to merge 1 commit into
fluxcd:mainfrom
immanuwell:fix/insecure-registry-tls

Conversation

@immanuwell

Copy link
Copy Markdown
Contributor

Run flux-mirror sync config.yaml --insecure against a registry with a self-signed certificate. Image copies work, but chart destinations and includeReferrers: true fail with x509: certificate signed by unknown authority.

Reuse Crane's resolved options for the lower-level OCI client.

TestSync_InsecureRegistryTLS covers both failures, normal copies, reruns, and a configured CA. make test, make lint, and make build pass.

Signed-off-by: Immanuel Tikhonov <pchpr.00@list.ru>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant