fix(platform): ignore ca when set env (#1759)

Co-authored-by: xdonggao <xdonggao@tencent.com>
tkestack · Feb 9, 2022 · ea1d1d0 · ea1d1d0
1 parent 939f14e
commit ea1d1d0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/api/platform/types.go b/api/platform/types.go
@@ -22,6 +22,7 @@ import (
 	"fmt"
 	"math/rand"
 	"net"
+	"os"
 	"path"
 	"strings"
 
@@ -391,7 +392,8 @@ func (cc ClusterCredential) RESTConfig(cls *Cluster) *rest.Config {
 			config.Host = fmt.Sprintf("https://%s", host)
 		}
 	}
-	if cc.CACert != nil {
+	// If api-server does not sign the ip in address, set ca then request, it will report x509 certificate error, need to ignore the certificate
+	if os.Getenv("TKE_IGNORE_CA") != "true" && cc.CACert != nil {
 		config.TLSClientConfig.CAData = cc.CACert
 	} else {
 		config.TLSClientConfig.Insecure = true

diff --git a/api/platform/v1/types.go b/api/platform/v1/types.go
@@ -22,6 +22,7 @@ import (
 	"fmt"
 	"math/rand"
 	"net"
+	"os"
 	"path"
 	strings "strings"
 
@@ -401,7 +402,8 @@ func (cc ClusterCredential) RESTConfig(cls *Cluster) *rest.Config {
 			config.Host = fmt.Sprintf("https://%s", host)
 		}
 	}
-	if cc.CACert != nil {
+	// If api-server does not sign the ip in address, set ca then request, it will report x509 certificate error, need to ignore the certificate
+	if os.Getenv("TKE_IGNORE_CA") != "true" && cc.CACert != nil {
 		config.TLSClientConfig.CAData = cc.CACert
 	} else {
 		config.TLSClientConfig.Insecure = true