-
Notifications
You must be signed in to change notification settings - Fork 5.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(appset): Add support for self-signed TLS / Certificates for Gitlab Scm Provider #14348
feat(appset): Add support for self-signed TLS / Certificates for Gitlab Scm Provider #14348
Conversation
Codecov ReportPatch coverage:
Additional details and impacted files@@ Coverage Diff @@
## master #14348 +/- ##
==========================================
+ Coverage 49.73% 49.75% +0.02%
==========================================
Files 261 261
Lines 44707 44754 +47
==========================================
+ Hits 22234 22268 +34
- Misses 20286 20295 +9
- Partials 2187 2191 +4
☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A couple general notes:
- should we add the same for the pull request generator?
- should we also provide the ability for the user to configure a cert bundle on the appset controller so that users don't have to disable cert validation?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Wording nitpicks mostly.
Can you add tests to show that a self-signed cert works when specified without setting insecure: true
?
docs/operator-manual/applicationset/Add-self-signed-TLS-Certs.md
Outdated
Show resolved
Hide resolved
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: ishitasequeira <ishiseq29@gmail.com>
Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
/cherry-pick release-2.8 |
Cherry-pick failed with |
…ab Scm Provider (#14348) (#14462) * Add support for self-signed TLS / Certificates for Gitlab Scm Provider * Add support for self-signed TLS / Certificates for Gitlab Pull Request * Add TLS configuration for SCM and Pull request Gitlab Provider * rebase with master * add params to argocd-cmd-params-cm and docs * fix generated manifests * Address comments for docs * Add test cases to validate insecure mode and ca cert combinations * simplify (#24) --------- Signed-off-by: ishitasequeira <ishiseq29@gmail.com> Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> Co-authored-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
…ab Scm Provider (argoproj#14348) * Add support for self-signed TLS / Certificates for Gitlab Scm Provider Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add support for self-signed TLS / Certificates for Gitlab Pull Request Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add TLS configuration for SCM and Pull request Gitlab Provider Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * rebase with master Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * add params to argocd-cmd-params-cm and docs Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * fix generated manifests Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Address comments for docs Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add test cases to validate insecure mode and ca cert combinations Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * simplify (argoproj#24) Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> --------- Signed-off-by: ishitasequeira <ishiseq29@gmail.com> Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> Co-authored-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
…ab Scm Provider (argoproj#14348) * Add support for self-signed TLS / Certificates for Gitlab Scm Provider Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add support for self-signed TLS / Certificates for Gitlab Pull Request Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add TLS configuration for SCM and Pull request Gitlab Provider Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * rebase with master Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * add params to argocd-cmd-params-cm and docs Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * fix generated manifests Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Address comments for docs Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * Add test cases to validate insecure mode and ca cert combinations Signed-off-by: ishitasequeira <ishiseq29@gmail.com> * simplify (argoproj#24) Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> --------- Signed-off-by: ishitasequeira <ishiseq29@gmail.com> Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> Co-authored-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
Add support for self-signed TLS / Certificates for Gitlab SCM Provider by adding a new
insecure
flag.Note on DCO:
If the DCO action in the integration test fails, one or more of your commits are not signed off. Please click on the Details link next to the DCO action for instructions on how to resolve this.
Checklist:
Please see Contribution FAQs if you have questions about your pull-request.