Comments (3)
Hello, the detective agency "Mandelbug" is here!
This is an interesting case, where everyone is a murderer.
Let's restore the sequence of events:
- Helm maintainers for an unknown reason add a check for the server name to the TLSConfig in case the InsecureSkipVerify flag is set. Probably, they thought that it helps with security (it's not)
- We, introducing the helm feature, for some reason (probably for testing purposes) added the
InsecureSkipVerify: true
and never changed that. - Bitnami creates a very popular helm chart repository
- VMware buys Bitnami
- Broadcom buys VMware
- And finally last week Broadcom decided to move the Bitnami repository to the
repo.broadcom.com
domain using a redirect.
Obviously, a redirect with a pinned Server Name won't work properly, and our poor k0s helm deployer dies fails to add the repo.
As usual, casualties could have been avoided, but the fix has been open for 3 years and has never been merged.
We'll think about how we can fix the issue on the k0s side and will try to push the helm upstream to merge the fix on their side.
As a workaround, you can use https://repo.broadcom.com/bitnami-files
as a Bitnami repo URL.
from k0s.
This is triggered by --insecure-skip-tls-verify
, which k0s sets by default, unfortunately.
Reproducer using the Helm CLI:
$ helm repo add bitnami https://charts.bitnami.com/bitnami --force-update --insecure-skip-tls-verify
Error: looks like "https://charts.bitnami.com/bitnami" is not a valid chart repository or cannot be reached: Get "https://repo.broadcom.com/bitnami-files/index.yaml": remote error: tls: handshake failure
The upstream Helm issue:
and the Pull Request addressing this:
from k0s.
When #4660 gets released, you should be able to use the following to circumvent the problem:
apiVersion: k0s.k0sproject.io/v1beta1
kind: ClusterConfig
metadata:
name: k0s
spec:
# [...]
extensions:
helm:
repositories:
- name: bitnami
url: https://charts.bitnami.com/bitnami
insecure: false
# [...]
from k0s.
Related Issues (20)
- Chart order change results in multiple manifest files and chart failing to update HOT 2
- k0s reset & kine HOT 5
- CPLB hairpining fails on vSphere HOT 2
- Joining additional controller node with dynamic config enabled wipes existing clusterconfig HOT 7
- Additional controller nodes use default service CIDR to sign certificates when using dynamic config HOT 4
- broken plan status symmetry being reported by autopilot HOT 2
- Broken `ClusterConfig` with dynamic config results in wiping system services HOT 1
- Better handling of unsupported combos in dynamic configuration HOT 1
- Following https://docs.k0sproject.io/v1.30.2+k0s.0/install/ to setup but sudo k0s kubectl get nodes is showing "No resources found" HOT 4
- Make the release pipeline public
- Don't auto-detect link-local IP addresses
- k0s reset hangs when containerd is broken HOT 1
- k0s nodes - cannot communicate between different regions/clouds HOT 6
- K0s configuration V2 HOT 4
- Disabling control plane isolation? HOT 2
- Option To Create Namespace If It doesn't Exist For Helm Charts Installation
- Allow multiple external IPs for the k0s cloud provider
- Autopilot can't update controller+worker with --kubelet-extra-args="--hostname-override"
- The Status.Error field in the charts.helm.k0sproject.io is removed on subsequent reconciles
- Add option to disable the use of --force flag when running helm upgrade extensions
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from k0s.