dosubot[bot] commented on issue #7928:
URL:
https://github.com/apache/incubator-devlake/issues/7928#issuecomment-2306482488
<!-- Answer -->
To resolve the "x509: cannot validate certificate for 10.252.182.24 because
it doesn't contain any IP SANs" error, you can bypass the certificate
verification by setting the `IN_SECURE_SKIP_VERIFY` environment variable to
`true`. This is not recommended for production environments due to security
concerns, but it can help you move forward.
Here is how you can update your Helm chart configuration to include this
environment variable:
1. **Update your `values.yaml` file to include the `IN_SECURE_SKIP_VERIFY`
environment variable:**
```yaml
lake:
env:
- name: IN_SECURE_SKIP_VERIFY
value: "true"
```
2. **Install the Helm chart with the updated configuration:**
```shell
helm repo add devlake
https://apache.github.io/incubator-devlake-helm-chart
helm repo update
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w
128 | head -n 1)
helm install devlake devlake/devlake \
--set mysql.useExternal=true \
--set mysql.externalServer=<dbserver> \
--set mysql.externalPort=<port> \
--set mysql.username=<your-username> \
--set mysql.password=<your-password> \
--set mysql.database=<your-database> \
--set lake.encryptionSecret.secret=$ENCRYPTION_SECRET \
--values values.yaml
```
Replace `<dbserver>`, `<port>`, `<your-username>`, `<your-password>`, and
`<your-database>` with your actual values.
This configuration will bypass the certificate verification, allowing the
`lake` container to connect to the database despite the missing IP SANs in the
certificate
<sup>[[1]](https://github.com/apache/incubator-devlake-website/blob/main/docs/Troubleshooting/Configuration.md)</sup><sup>[[2]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v0.19/Troubleshooting/Configuration.md)</sup><sup>[[3]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v0.15/Troubleshooting/Configuration.md)</sup><sup>[[4]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v0.16/Troubleshooting/Configuration.md)</sup><sup>[[5]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v1.0/Troubleshooting/Configuration.md)</sup>.
<!-- Dosu Comment Footer -->
*To continue talking to [Dosu](https://dosu.dev), mention @dosu.*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
