Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ws-daemon] Support GIT_SSL_CAINFO #9613

Merged
merged 1 commit into from
Apr 28, 2022
Merged

[ws-daemon] Support GIT_SSL_CAINFO #9613

merged 1 commit into from
Apr 28, 2022

Conversation

csweichel
Copy link
Contributor

Description

Fixes custom CA certs during content init in ws-daemon.
Much simpler than #9609

Related Issue(s)

Fixes #9604

How to test

Use with an SCM with custom CA certs

Release Notes

Support custom CA certs for SCM systems

Copy link
Contributor

@Pothulapati Pothulapati left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Can confirm that this fixes the self-signed SCM issue!

@csweichel csweichel marked this pull request as ready for review April 28, 2022 12:44
@csweichel csweichel requested review from a team April 28, 2022 12:44
@github-actions github-actions bot added team: delivery Issue belongs to the self-hosted team team: webapp Issue belongs to the WebApp team team: workspace Issue belongs to the Workspace team labels Apr 28, 2022
Value: mountPath,
env = []corev1.EnvVar{
{Name: "NODE_EXTRA_CA_CERTS", Value: mountPath},
{Name: "GIT_SSL_CAINFO", Value: mountPath},
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TIOLI: Should we move this to ws-daemon daemonset? As its only needed there. keeping it here means that we add it to a lot of control-plane components 🤔 ?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔼

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's also needed in the workspace to make the git operations work well there

Copy link
Member

@geropl geropl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Builds, code LGTM. did not test because that's already done.

small nit about usage scope here, but seems to broaden the scope of this PR. 👍

@roboquat roboquat merged commit 96b2a36 into main Apr 28, 2022
@roboquat roboquat deleted the cw/fix-9604-again branch April 28, 2022 13:17
@roboquat roboquat added the deployed: webapp Meta team change is running in production label May 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
deployed: webapp Meta team change is running in production release-note size/S team: delivery Issue belongs to the self-hosted team team: webapp Issue belongs to the WebApp team team: workspace Issue belongs to the Workspace team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[self-hosted] Cannot use SCM (like GitLab) with a self-signed TLS cert
5 participants