fix(stacks): confirm enable tls verification [EE-5410] (#8895)

app/portainer/components/forms/kubernetes-redeploy-app-git-form/kubernetes-redeploy-app-git-form.controller.js

@@ -4,6 +4,7 @@ import { buildConfirmButton } from '@@/modals/utils';
 import { ModalType } from '@@/modals';
 import { parseAutoUpdateResponse } from '@/react/portainer/gitops/AutoUpdateFieldset/utils';
 import { baseStackWebhookUrl, createWebhookId } from '@/portainer/helpers/webhookHelper';
+import { confirmEnableTLSVerify } from '@/react/portainer/gitops/utils';
 
 class KubernetesRedeployAppGitFormController {
   /* @ngInject */
@@ -71,6 +72,13 @@ class KubernetesRedeployAppGitFormController {
 
   onChangeTLSSkipVerify(value) {
     return this.$async(async () => {
+      if (this.stack.GitConfig.TLSSkipVerify && !value) {
+        const confirmed = await confirmEnableTLSVerify();
+
+        if (!confirmed) {
+          return;
+        }
+      }
       this.onChange({ TLSSkipVerify: value });
     });
   }

app/portainer/components/forms/stack-redeploy-git-form/stack-redeploy-git-form.controller.js

@@ -4,6 +4,7 @@ import { confirmStackUpdate } from '@/react/docker/stacks/common/confirm-stack-u
 
 import { parseAutoUpdateResponse } from '@/react/portainer/gitops/AutoUpdateFieldset/utils';
 import { baseStackWebhookUrl, createWebhookId } from '@/portainer/helpers/webhookHelper';
+import { confirmEnableTLSVerify } from '@/react/portainer/gitops/utils';
 
 class StackRedeployGitFormController {
   /* @ngInject */
@@ -95,8 +96,17 @@ class StackRedeployGitFormController {
     this.onChange({ Env: value });
   }
 
-  onChangeTLSSkipVerify(value) {
+  async onChangeTLSSkipVerify(value) {
+    return this.$async(async () => {
+      if (this.model.TLSSkipVerify && !value) {
+        const confirmed = await confirmEnableTLSVerify();
+
+        if (!confirmed) {
+          return;
+        }
+      }
       this.onChange({ TLSSkipVerify: value });
+    });
   }
 
   onChangeOption(values) {

app/react/portainer/gitops/utils.ts

@@ -1,3 +1,5 @@
+import { confirm } from '@@/modals/confirm';
+
 import { GitFormModel } from './types';
 
 export function getAuthentication(
@@ -18,3 +20,11 @@ export function getAuthentication(
     password: model.RepositoryPassword,
   };
 }
+
+export function confirmEnableTLSVerify() {
+  return confirm({
+    title: 'Enable TLS Verification?',
+    message:
+      'Enabling the verification of TLS certificates without ensuring the correct configuration of your Certificate Authority (CA) for self-signed certificates can result in deployment failures.',
+  });
+}