We’re currently running fleet behind a load balancer that handles https and fleet itself listens on http on the back end. I notice I can’t seem to use fleetctl pointing to localhost because it demands an https connection. Is there currently a flag to override that? I don’t see one.

I believe what you’re looking for is the

--tls-skip-verify

flag in this command:

fleetctl config set --address <https://localhost:8080> --tls-skip-verify

More information about the fleetctl config command can be found in the docs here.

It doesn’t. I still get

error creating Fleet API client handler: Address must start with https://

when I try to do

fleetctl login

Yep, that looks to be it. @Scott Lampert can you hit the LB url as a workaround and file an issue for http support if you'll need that?

Well I noticed it when I was having issues with LB 🙂

Heh, seems we've put you in a bit of a bind then

It’s not currently a blocker, but it would be nice to have. Also for all the init stuff our container does so it can talk locally instead of having to go out and back in through the LB

Makes sense. Please file an issue and we'll look at adding that.

@zwass I made a PR for this. https://github.com/fleetdm/fleet/pull/489

You got it 🙂