feat: add insecure flag for push command (#129)

Signed-off-by: chlins <[email protected]>

Author: chlins

cmd/push.go

@@ -51,6 +51,7 @@ func init() {
 	flags := pushCmd.Flags()
 	flags.IntVar(&pushConfig.Concurrency, "concurrency", pushConfig.Concurrency, "specify the number of concurrent push operations")
 	flags.BoolVar(&pushConfig.PlainHTTP, "plain-http", false, "use plain HTTP instead of HTTPS")
+	flags.BoolVar(&pushConfig.Insecure, "insecure", false, "turning on this flag will disable TLS verification")
 	flags.BoolVar(&pushConfig.Nydusify, "nydusify", false, "[EXPERIMENTAL] nydusify the model artifact")
 	flags.MarkHidden("nydusify")
 

pkg/backend/push.go

@@ -19,8 +19,10 @@ package backend
 import (
 	"bytes"
 	"context"
+	"crypto/tls"
 	"encoding/json"
 	"fmt"
+	"net/http"
 
 	internalpb "github.com/CloudNativeAI/modctl/internal/pb"
 	"github.com/CloudNativeAI/modctl/pkg/config"
@@ -59,10 +61,17 @@ func (b *backend) Push(ctx context.Context, target string, cfg *config.Push) err
 		return fmt.Errorf("failed to create credential store: %w", err)
 	}
 
+	httpClient := &http.Client{
+		Transport: retry.NewTransport(&http.Transport{
+			TLSClientConfig: &tls.Config{
+				InsecureSkipVerify: cfg.Insecure,
+			},
+		}),
+	}
 	dst.Client = &auth.Client{
 		Cache:      auth.NewCache(),
 		Credential: credentials.Credential(credStore),
-		Client:     retry.DefaultClient,
+		Client:     httpClient,
 	}
 
 	if cfg.PlainHTTP {

pkg/config/push.go

@@ -26,6 +26,7 @@ const (
 type Push struct {
 	Concurrency int
 	PlainHTTP   bool
+	Insecure    bool
 	Nydusify    bool
 }