Skip to content

chore(kubernetes): add ability to ignore ssl#1108

Merged
andypf merged 7 commits intomainfrom
andypf-k8sclient-ssl
Aug 1, 2025
Merged

chore(kubernetes): add ability to ignore ssl#1108
andypf merged 7 commits intomainfrom
andypf-k8sclient-ssl

Conversation

@andypf
Copy link
Copy Markdown
Collaborator

@andypf andypf commented Jul 29, 2025

This pull request introduces two new options to the client configuration:

  • debug: Enables debug logging to facilitate troubleshooting and provide more insight into client operations.
  • ignoreSsl: Allows the client to ignore SSL certificate verification errors, such as failures caused by missing or self-signed certificates during the SSL handshake. This helps prevent connection failures in development or testing environments where certificates may not be fully trusted.

Changes

  • Added a debug flag to activate detailed logging output.
  • Added an ignoreSsl flag that, when enabled, disables SSL validation to allow connections even if certificates are invalid or missing.
  • Updated client connection logic to conditionally disable SSL verification based on the ignoreSsl flag.

Motivation

  • Improve developer experience by providing detailed debug information.
  • Support use cases where SSL certificates are not properly set up (e.g., local testing, internal environments) without blocking client operations due to SSL errors.

Security Considerations

  • The ignoreSsl option disables an important security check and should only be used in trusted or non-production environments.
  • Users should be made aware of the risks associated with bypassing SSL verification.

@andypf andypf requested a review from a team as a code owner July 29, 2025 14:19
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Jul 29, 2025

🦋 Changeset detected

Latest commit: 42447b0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@cloudoperators/juno-k8s-client Minor
@cloudoperators/juno-app-greenhouse Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Comment thread packages/k8s-client/src/request.ts Dismissed
@andypf andypf requested a review from franzheidl as a code owner July 29, 2025 14:31
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 29, 2025

PR Preview Action v1.6.2

🚀 View preview at
https://cloudoperators.github.io/juno/pr-preview/pr-1108/

Built to branch gh-pages at 2025-07-29 15:13 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

@andypf andypf marked this pull request as draft July 29, 2025 15:09
@andypf andypf force-pushed the andypf-k8sclient-ssl branch from 338dde9 to 6426d47 Compare July 29, 2025 15:23
@andypf andypf changed the title chore(kubernetes-client): add ability to ignore ssl chore(kubernetes): add ability to ignore ssl Jul 29, 2025
@andypf andypf marked this pull request as ready for review July 29, 2025 18:10
hgw77
hgw77 previously approved these changes Jul 30, 2025
hodanoori
hodanoori previously approved these changes Jul 30, 2025
Copy link
Copy Markdown
Contributor

@hodanoori hodanoori left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don’t like development and testing to be stopped because certificates are having issues, and I’m always a fan of detailed debug information 😊. I just have a small comment; otherwise, it’s approved from my side.

Comment thread packages/k8s-client/README.md Outdated
TilmanHaupt
TilmanHaupt previously approved these changes Jul 30, 2025
@andypf andypf dismissed stale reviews from TilmanHaupt, hodanoori, and hgw77 via 5f362a4 July 31, 2025 07:45
@TilmanHaupt TilmanHaupt assigned TilmanHaupt and andypf and unassigned TilmanHaupt Jul 31, 2025
@andypf andypf merged commit 40d8dd8 into main Aug 1, 2025
14 checks passed
@andypf andypf deleted the andypf-k8sclient-ssl branch August 1, 2025 08:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants