Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Injection webhook not working on RHEL based distros #118

Open
sanchezfauste opened this issue May 24, 2024 · 0 comments
Open

Injection webhook not working on RHEL based distros #118

sanchezfauste opened this issue May 24, 2024 · 0 comments

Comments

@sanchezfauste
Copy link

It seems that caCertsMountPath is hardcoded to /etc/ssl/certs:

caCertsVolumeName = "ca-certs"
caCertsMountPath = "/etc/ssl/certs"

RHEL uses diferent path /etc/pki/ca-trust/source/anchors to store trusted CAs:

This directory /etc/pki/ca-trust/source/ contains CA certificates and
trust settings in the PEM file format. The trust settings found here will be
interpreted with a high priority - higher than the ones found in
/usr/share/pki/ca-trust-source/.

=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
            list of CAs trusted on the system:

            Copy it to the
                    /etc/pki/ca-trust/source/anchors/
            subdirectory, and run the
                    update-ca-trust
            command.

            If your certificate is in the extended BEGIN TRUSTED file format,
            then place it into the main source/ directory instead.
=============================================================================

Please refer to the update-ca-trust(8) manual page for additional information.

The result is that certificates are mounted at a wrong path.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant