Skip to content

Add option to disable strict X509 verification - #2711

Open
Vishwa0223 wants to merge 1 commit into
kubernetes-client:masterfrom
Vishwa0223:fix-2602-strict-x509
Open

Add option to disable strict X509 verification#2711
Vishwa0223 wants to merge 1 commit into
kubernetes-client:masterfrom
Vishwa0223:fix-2602-strict-x509

Conversation

@Vishwa0223

@Vishwa0223 Vishwa0223 commented Sep 11, 2026

Copy link
Copy Markdown

Adds an option to disable strict X.509 certificate verification in the synchronous Kubernetes client.

Changes

  • Added disable_strict_ssl_verification to Configuration.
  • Added SSL context handling in RESTClientObject.
  • Disabled ssl.VERIFY_X509_STRICT when the option is enabled.
  • Added a test to verify that strict X.509 verification can be disabled.

Testing

  • python -m pytest kubernetes/test/test_api_client.py
  • 13 passed

Release note

Added an option to disable strict X.509 certificate verification in the synchronous Kubernetes client.

Fixes #2602

@kubernetes-prow

Copy link
Copy Markdown
Contributor

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@kubernetes-prow kubernetes-prow Bot added the do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels. label Sep 11, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Vishwa0223
Once this PR has been reviewed and has the lgtm label, please assign yliaog for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added needs-kind Indicates a PR lacks a `kind/foo` label and requires one. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Sep 11, 2026
@Vishwa0223

Copy link
Copy Markdown
Author

Hi, could you please review this PR when you have a chance? Thank you!

No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)

The version of the OpenAPI document: release-1.37
Generated by OpenAPI Generator (https://openapi-generator.tech)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this file is generated, please making changes in the upstream openapi-generator

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels. needs-kind Indicates a PR lacks a `kind/foo` label and requires one. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add option to disable strict x509 verifcation in sync client

2 participants