kubevirt / containerized-data-importer
59%
main: 59%

LAST BUILD BRANCH: replace-virt-default-functest
DEFAULT BRANCH: main
Repo Added
Files 157
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH imageio_skip_tls
branch: imageio_skip_tls
CHANGE BRANCH
x

coverage: 59.071% (-0.005%) from 59.076%
#5654

Pull #3944

travis-ci

Hazanel 
Add InsecureSkipVerify support for ImageIO data source

What this PR does / why we need it:

This PR adds support for skipping TLS certificate verification when using
ImageIO as a data source for DataVolumes. This enables warm migrations from
oVirt/RHV providers when "Skip certificate validation" is enabled.

The implementation includes:
- Added InsecureSkipVerify field to DataVolumeSourceImageIO API spec
- Added AnnInsecureSkipVerify annotation for passing the flag to importer pods
- Updated UpdateImageIOAnnotations to set the annotation when enabled
- Modified NewImageioDataSource to accept and use the insecureSkipVerify parameter
- Updated getOvirtClient to use tls.Insecure() when flag is true
- Modified createHTTPClient to configure TLSClientConfig.InsecureSkipVerify
- Updated all test cases to pass the new parameter

After the fix:

Warm migrations from oVirt/RHV providers now work correctly when certificate validation is skipped.
The CDI ImageIO importer can connect to oVirt ImageIO
services without requiring a valid CA certificate in a ConfigMap, as long as the InsecureSkipVerify flag is set to true in the DataVolume spec.

Example DataVolume usage:
```yaml
spec:
  source:
    imageio:
      url: "https://ovirt-engine.example.com/ovirt-engine/api"
      diskId: "disk-uuid"
      secretRef: "ovirt-credentials"
      insecureSkipVerify: true  # Skip TLS certificate validation
```

Which issue(s) this PR fixes:

Jira Ticket: https://issues.redhat.com/browse/CNV-71978

Release note:
```release-note
DataVolumes can now skip TLS certificate verification when importing from oVirt/RHV ImageIO sources
by setting `spec.source.imageio.insecureSkipVerify: true`.
```
Signed-off-by: Elad Hazan <ehazan@redhat.com>
Pull Request #3944: Add InsecureSkipVerify support for ImageIO data source

33 of 48 new or added lines in 7 files covered. (68.75%)

4 existing lines in 1 file now uncovered.

17248 of 29199 relevant lines covered (59.07%)

0.65 hits per line

Relevant lines Covered
29199 RELEVANT LINES 17248 COVERED LINES
0.65 HITS PER LINE
Source Files on imageio_skip_tls

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
#5654 imageio_skip_tls Add InsecureSkipVerify support for ImageIO data source What this PR does / why we need it: This PR adds support for skipping TLS certificate verification when using ImageIO as a data source for DataVolumes. This enables warm migrations from oVir... Pull #3944 Hazanel travis-ci
59.07
#5653 imageio_skip_tls Add InsecureSkipVerify support for ImageIO data source What this PR does / why we need it: This PR adds support for skipping TLS certificate verification when using ImageIO as a data source for DataVolumes. This enables warm migrations from oVir... Pull #3944 Hazanel travis-ci
59.06
See All Builds (5662)