k3s tls-san: add kai-server.local so fleet-readout.sh can drop skip-tls-verify #303
Labels
No labels
burndown-2026-06
burndown-2026-08
autonomy
async-consult
autonomy
epic
autonomy
headless
autonomy
live-collab
coherence-core
priority
P0
priority
P1
priority
P2
priority
P3
priority
P4
qa-fixture
role/advocate
role/director
role/exec
role/frontend
role/gamedev
role/human
role/platform
role/qa
role/science
role/sysadmin
state
ambient
No milestone
No project
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
coilyco-flight-deck/infrastructure#303
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
coilysiren/coilysirenscripts/fleet-readout.shcarries a kubectl workaround: the kubeconfig defaulthttps://kai-server:6443answers Bad Gateway, so the script points atkai-server.localand passes--insecure-skip-tls-verifybecause the k3s API cert has nokai-server.localSAN.Removal condition, stated in the script comment: add
kai-server.localto the k3stls-sanlist, then drop the skip-tls-verify flag from the script.Two parts:
kai-server.localto the k3s servertls-sanconfig and roll the cert.--insecure-skip-tls-verify(and ideally the--serveroverride) fromscripts/fleet-readout.shonce the SAN lands.Filed so the workaround's removal condition has a tracking ref instead of living only in a script comment.
Backlog consolidation on 2026-07-15: the agent is closing this P4 item as a reversible icebox entry. The work remains intentionally parked rather than completed. Kai can reopen it if she promotes it back into active direction.