-
Notifications
You must be signed in to change notification settings - Fork 141
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RHTAPSRE-405: Custom CA bundle for git-clone #845
Conversation
Support custom CA bundle in the git-clone task. Required when cloning using HTTPs from an SCM that has self-signed certificate. Signed-off-by: gbenhaim <[email protected]>
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is there a more generic way to do this? We will end up having to respect custom CAs in every task that communicates with an internal host, e.g. prefetch-dependencies (it sometimes fetches git tags from the repo)
@chmeliik I didn't find any other way to do it. |
@chmeliik here is the openshift documentation I followed https://docs.openshift.com/container-platform/4.14/networking/configuring-a-custom-pki.html#nw-proxy-configure-object_configuring-a-custom-pki |
Ok. Just beware that other tasks will need corresponding changes too. |
Quality Gate passedIssues Measures |
Technically users could define pod templates in pipeline definition and mount CA there for every pod, but that's not something we should have at task level though. |
https://tekton.dev/docs/pipelines/podtemplates/ it seems that volumeMounts are not supported :( |
Support custom CA bundle in the git-clone task.
Required when cloning using HTTPs from an SCM that has self-signed certificate.