Skip to content

Setting --insecure-skip-tls-verify does not work for Helm chart components using repos #3476

@willswire

Description

@willswire

Environment

Device and OS: Ubuntu 24.04.1 LTS
App version: v0.48.1
Kubernetes distro being used: Any
Other: Accessing a GitLab instance that is using a self-signed certificate

Steps to reproduce

  1. Attempt to create a Zarf package with a Helm chart component, where the repo is GitLab project repo on a GitLab instance using a self signed certificate. Pass the --insecure-skip-tls-verify flag.

Expected result

The package is pulled successfully.

Actual Result

An x509 certificate error occurs.

Visual Proof (screenshots, videos, text, etc)

     ERROR:  failed to create package: unable to add component "<redacted>": unable to download the published chart
             "<redacted>": unable to pull the helm chart: looks like
             "https://<redacted>/api/v4/projects/1234/packages/helm/stable" is not a valid
             chart repository or cannot be reached: Get
             "https://<redacted>/api/v4/projects/1234/packages/helm/stable/index.yaml": tls:
             failed to verify certificate: x509: certificate signed by unknown authority

Severity/Priority

Severe

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions