Is there a config setting or environmental variable for

lakectl

to use a custom SSL certificate? When I use an insecure route the cli works fine but when I secure it with our SSL certificate I get the following error.

❯ lakectl branch list <lakefs://repo/|lakefs://repo/>
Error executing command: Get "<https://secure-route/api/v1/repositories/repo/branches?after=&amount=100|https://secure-route/api/v1/repositories/repo/branches?after=&amount=100>": x509: certificate signed by unknown authority

Hi Tomas, checking

Thanks Barak If it helps here is the output when I use the non TLS route.

❯ lakectl branch list <lakefs://repo/|lakefs://repo/>
+--------+------------------------------------------------------------------+
| BRANCH | COMMIT ID                                                        |
+--------+------------------------------------------------------------------+
| main   | 82a967204bcbbf819302876bac2bd3d9cd1fb1becf65d0b1200ae4ed27222670 |
+--------+------------------------------------------------------------------+

the lakectl you use this the one downloaded from github or the one found inside the lakefs docker container?

This is version

0.40.3

downloaded from GitHub

lakectl uses Go runtime that should support these variables. which platform do you use - I want to send you a different binary

I’m on macOS. Also I was able to curl that same url so the cert is correct.

❯ env | grep lm_ca
PIP_CERT=/Users/me/certs/lm_ca.pem
CURL_CA_BUNDLE=/Users/me/certs/lm_ca.pem
LM_CERT_PATH=/Users/me/certs/lm_ca.pem
REQUESTS_CA_BUNDLE=/me/e379822/certs/lm_ca.pem
SSL_CERTS_FILE=/Users/me/certs/lm_ca.pem
AWS_CA_BUNDLE=/Users/me/certs/lm_ca.pem
PGO_CA_CERT=/Users/me/certs/lm_ca.pem
SSL_CERT_FILE=/Users/me/certs/lm_ca.pem

❯ curl "<https://AKIAJVQCBG3J6X5HPW2Q:redacted@secure-route/api/v1/repositories/repo/branches?after=&amount=100|https://AKIAJVQCBG3J6X5HPW2Q:redacted@secure-route/api/v1/repositories/repo/branches?after=&amount=100>"
{"pagination":{"has_more":false,"max_per_page":1000,"next_offset":"","results":1},"results":[{"commit_id":"82a967204bcbbf819302876bac2bd3d9cd1fb1becf65d0b1200ae4ed27222670","id":"main"}]}

lakectl.zip

Thanks Barak that did the trick!