added insecure flag for helm factory

pkg/dependencies/factory.go

@@ -781,7 +781,8 @@ func (f *Factory) WithHelmFactory(opts ...executables.HelmOpt) *Factory {
 
 		f.dependencies.HelmFactory = NewHelmFactory(f.executablesConfig.builder).
 			WithRegistryMirror(f.registryMirror).
-			WithProxyConfigurations(f.proxyConfiguration)
+			WithProxyConfigurations(f.proxyConfiguration).
+			WithInsecure()
 		return nil
 	})
 
@@ -863,7 +864,7 @@ func (f *Factory) WithCNIInstaller(spec *cluster.Spec, provider providers.Provid
 }
 
 func (f *Factory) WithCiliumTemplater() *Factory {
-	f.WithHelmFactory(executables.WithInsecure())
+	f.WithHelmFactory()
 
 	f.buildSteps = append(f.buildSteps, func(ctx context.Context) error {
 		if f.dependencies.CiliumTemplater != nil {

pkg/dependencies/helm.go

@@ -17,6 +17,7 @@ type HelmFactory struct {
 	helm               *executables.Helm
 	registryMirror     *registrymirror.RegistryMirror
 	proxyConfiguration map[string]string
+	insecure           bool
 }
 
 // WithRegistryMirror configures the factory to use registry mirror wherever applicable.
@@ -33,6 +34,13 @@ func (f *HelmFactory) WithProxyConfigurations(proxyConfiguration map[string]stri
 	return f
 }
 
+// WithInsecure configures the factory to configure helm to use to allow connections to TLS registry without certs or with self-signed certs
+func (f *HelmFactory) WithInsecure() *HelmFactory {
+	f.insecure = true
+
+	return f
+}
+
 func NewHelmFactory(builder ExecutableBuilder) *HelmFactory {
 	return &HelmFactory{
 		builder: builder,
@@ -51,6 +59,10 @@ func (f *HelmFactory) GetInstance(opts ...executables.HelmOpt) *executables.Helm
 		opts = append(opts, executables.WithEnv(f.proxyConfiguration))
 	}
 
+	if f.insecure {
+		opts = append(opts, executables.WithInsecure())
+	}
+
 	f.helm = f.builder.BuildHelmExecutable(opts...)
 	return f.helm
 }