insecureSkipTlsVerify option is not available for RedpandaConsole- Admin API configuration or RPK CLI -X either

[buznyusz]

Version & Environment

Redpanda version: (use rpk version):

Version: v24.3.1
Git ref: afe1a3f
Build date: 2024-12-02T23:29:48Z
OS/Arch: linux/amd64 ( RHEL9 )

Include link to test results for automated test failures

 rpk version -X admin.tls.enabled=true -X admin.tls.ca=/redpanda/ssl/ca.cer  -vvvv
Version:     v24.3.1
Git ref:     afe1a3f1ff
Build date:  2024-12-02T23:29:48Z
OS/Arch:     linux/amd64
Go version:  go1.23.1
17:28:47.557  DEBUG  Sending request  {"method": "GET", "url": "https://127.0.0.1:9644/v1/features/enterprise", "bearer": false, "basic": false}
17:28:47.566  DEBUG  Retrying GET for error: Get "https://127.0.0.1:9644/v1/features/enterprise": tls: failed to verify certificate: x509: cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs

Jan 7 17:31:30 lxvredpandad1 redpanda-console[47171]: {"level":"debug","ts":"2025-01-07T17:31:30.141+0100","msg":"Retrying GET for error: Get "https://localhost:9644/v1/brokers\": tls: failed to verify certificate: x509: certificate is valid for lxvredpandad1, lxvredpandad1.develop.raiffeisen.hu, not localhost\n"}`

We have to option at the many places ( broker connection, schema registry connection ), but not at the admin api:
https://docs.redpanda.com/current/console/config/configure-console/

How to reproduce the issue?

1. generate a certificate without the localhost / 127.0.0.1 in the SAN IP's
2. Set SSL for Admin API
3. rpk version -X admin.tls.enabled=true -X admin.tls.ca=/redpanda/ssl/ca.cer -v

JIRA Link: CORE-8731

[r-vasquez]

Hi @buznyusz

In the example above, for the CLI example, did you try using -X admin.tls.insecure_skip_verify ?

[buznyusz]

Hi @buznyusz

In the example above, for the CLI example, did you try using -X admin.tls.insecure_skip_verify ?

Hello
the CLI works with the -X admin.tls.insecure_skip_verify=true but it is an undocumented option as i see:
https://docs.redpanda.com/current/reference/rpk/rpk-x-options/

And we do not have this option when we configure the RedpandaConsole
https://docs.redpanda.com/current/console/config/configure-console/