[25.3.x] S-127566: Added K8S_SKIP_TLS_VERIFY env var to bypass SSL verification for legacy clusters

README.md

@@ -45,6 +45,12 @@ class Hello(BaseTask):
 
 ## Changelog
 
+### Version 25.3.1
+
+#### 🛠️ Enhancements
+
+- **Added support** for skipping SSL verification in legacy clusters.
+
 ### Version 25.3.0
 
 #### 🛠️ Enhancements

digitalai/release/integration/k8s.py

@@ -1,3 +1,4 @@
+import os
 import threading
 
 from kubernetes import client, config
@@ -27,7 +28,14 @@ def get_client():
                     except Exception:
                         dai_logger.exception("Failed to load any Kubernetes config")
                         raise RuntimeError("Could not configure Kubernetes client")
-                kubernetes_client = client.CoreV1Api()
+                # Check if SSL verification should be disabled (for legacy clusters)
+                if os.getenv('SKIP_TLS_LEGACY_K8S', 'false').lower() == 'true':
+                    configuration = client.Configuration.get_default_copy()
+                    configuration.verify_ssl = False
+                    kubernetes_client = client.CoreV1Api(client.ApiClient(configuration))
+                    dai_logger.info("Kubernetes TLS certificate verification disabled")
+                else:
+                    kubernetes_client = client.CoreV1Api()
                 #dai_logger.info("Kubernetes client created successfully")
 
     return kubernetes_client

pyproject.toml

@@ -12,7 +12,7 @@ packages = ["digitalai"]
 
 [project]
 name = "digitalai_release_sdk"
-version = "25.3.0"
+version = "25.3.1"
 authors = [
   { name="Digital.ai", email="pypi-devops@digital.ai" },
 ]