feat: add insecure to trust self-signed certificates (#155)

huaweicloud · Jan 20, 2025 · 92ae73a · 92ae73a
1 parent 3e0a52f
commit 92ae73a
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/pkg/config/cloud.go b/pkg/config/cloud.go
@@ -1,6 +1,7 @@
 package config
 
 import (
+	"crypto/tls"
 	"fmt"
 	"net/http"
 
@@ -20,6 +21,7 @@ type CloudCredentials struct {
 		Cloud     string `gcfg:"cloud"`
 		AuthURL   string `gcfg:"auth-url"`
 		Region    string `gcfg:"region"`
+		Insecure  bool   `gcfg:"insecure"`
 		AccessKey string `gcfg:"access-key"`
 		SecretKey string `gcfg:"secret-key"`
 		ProjectID string `gcfg:"project-id"`
@@ -135,7 +137,14 @@ func (c *CloudCredentials) newCloudClient() error {
 		return err
 	}
 
-	transport := &http.Transport{Proxy: http.ProxyFromEnvironment}
+	transport := &http.Transport{
+		Proxy: http.ProxyFromEnvironment,
+		TLSClientConfig: &tls.Config{
+			MinVersion:         tls.VersionTLS12,
+			InsecureSkipVerify: c.Global.Insecure,
+		},
+	}
+
 	client.HTTPClient = http.Client{
 		Transport: &utils.LogRoundTripper{
 			Rt: transport,