From 74253d52fbe03742dc59d9e10e1ba8f4353ae230 Mon Sep 17 00:00:00 2001 From: Ricardo Campos Date: Tue, 28 Apr 2026 18:26:16 -0300 Subject: [PATCH] Update cd-pr.yml --- .github/workflows/cd-pr.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/workflows/cd-pr.yml b/.github/workflows/cd-pr.yml index abfbf33..c633461 100644 --- a/.github/workflows/cd-pr.yml +++ b/.github/workflows/cd-pr.yml @@ -98,6 +98,19 @@ jobs: echo "--- Run provider directly ---" timeout 5 $PROVIDER --help 2>&1 || true + - name: Test TLS with CA verification like Terraform does + run: | + kubectl config view --raw -o jsonpath='{.clusters[0].cluster.certificate-authority-data}' | base64 -d > /tmp/ca.crt + kubectl config view --raw -o jsonpath='{.users[0].user.client-certificate-data}' | base64 -d > /tmp/client.crt + kubectl config view --raw -o jsonpath='{.users[0].user.client-key-data}' | base64 -d > /tmp/client.key + + echo "--- Test with CA verification (exactly like Terraform) ---" + curl -v \ + --cacert /tmp/ca.crt \ + --cert /tmp/client.crt \ + --key /tmp/client.key \ + https://191.252.159.227:6443/api/v1/namespaces/tasknote-stg 2>&1 | grep -E "TLS|SSL|Connected|error|timeout|HTTP|issuer|subject" + - name: Terraform Plan id: check-changes working-directory: terraform-stg