Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-1667

Option "--insecure-skip-tls-verify" broken in oc CLI 4.11

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • None
    • 4.11.z
    • oc
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Moderate
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      When trying to access directly one of the master nodes using the oc cli 4.11, I'm facing some issues when --insecure-skip-tls-verify=true option

      trying with cli version 4.11.5
      $ oc version
Client Version: 4.11.5
Kustomize Version: v4.5.4
Kubernetes Version: v1.23.5+012e945
$ oc login 10.0.89.234:6443 --insecure-skip-tls-verify=true -u kubeadmin
error: x509: "kube-apiserver-service-network-signer" certificate is not trusted

      Checking with the previous oc versions, it's working fine:

      oc 4.9.49
      $ oc version
Client Version: 4.9.49
error: You must be logged in to the server (Unauthorized)
$ oc login 10.0.89.234:6443 --insecure-skip-tls-verify=true -u kubeadmin
Authentication required for https://10.0.89.234:6443 (openshift)
Username: kubeadmin
Password:
Login successful.
      oc 4.10.34
      $ oc version
Client Version: 4.10.34
Kubernetes Version: v1.23.5+012e945
$ oc login 10.0.89.234:6443 --insecure-skip-tls-verify=true -u kubeadmin
Authentication required for https://10.0.89.234:6443 (openshift)
Username: kubeadmin
Password:
Login successful.

      Version-Release number of selected component (if applicable):

      All macOS 4.11 client versions

      How reproducible:

      Downloading any version of the CLI in 4.11

      Steps to Reproduce:

      1. download a 4.11 macOS cli version from https://mirror.openshift.com/pub/openshift-v4/clients/ocp/4.11.5/openshift-client-mac.tar.gz
      2. try to login to a cluster with the --insecure-skip-tls-verify=true option

      Actual results:

      Failed to skip the TLS verification

      Expected results:

      Skip the TLS verification

      Additional info:

              jchaloup@redhat.com Jan Chaloupka
              rhn-support-vlours Vincent Lours
              None
              None
              Ying Zhou Ying Zhou
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: