Merge pull request #4033 from chaosi-zju/helm

remove insecureSkipTLSVerify in helm chart

charts/karmada/templates/_helpers.tpl

@@ -213,6 +213,15 @@ app: {{$name}}
 {{- end }}
 {{- end -}}
 
+{{- define "karmada.apiserver.caBundle" -}}
+{{- if eq .Values.certs.mode "auto" }}
+caBundle: {{ print "{{ ca_crt }}" }}
+{{- end }}
+{{- if eq .Values.certs.mode "custom" }}
+caBundle: {{ b64enc .Values.certs.custom.caCrt }}
+{{- end }}
+{{- end -}}
+
 {{- define "karmada.webhook.caBundle" -}}
 {{- if eq .Values.certs.mode "auto" }}
 caBundle: {{ print "{{ ca_crt }}" }}

charts/karmada/templates/_karmada_apiservice.tpl

@@ -11,7 +11,7 @@ metadata:
     app: {{ $name }}-aggregated-apiserver
     apiserver: "true"
 spec:
-  insecureSkipTLSVerify: true
+  {{- include "karmada.apiserver.caBundle" . | nindent 2 }}
   group: cluster.karmada.io
   groupPriorityMinimum: 2000
   service:
@@ -39,7 +39,7 @@ metadata:
     app: {{ $name }}-search
     apiserver: "true"
 spec:
-  insecureSkipTLSVerify: true
+  {{- include "karmada.apiserver.caBundle" . | nindent 2 }}
   group: search.karmada.io
   groupPriorityMinimum: 2000
   service:

charts/karmada/templates/pre-install-job.yaml

@@ -212,7 +212,6 @@ data:
         clusters:
           - cluster:
               certificate-authority-data: {{ print "{{ ca_crt }}" }}
-              insecure-skip-tls-verify: false
               server: https://{{ $name }}-apiserver.{{ $namespace }}.svc.{{ .Values.clusterDomain }}:5443
             name: {{ $name }}-apiserver
         users: