Fix installer update-ca-trust command #1985
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
SUMMARY
The awx-task, awx-web and awx-migration run an init container
init-bundle-ca-trust
if you want to add your own CA certificate to the truststore. Therefore theupdate-ca-trust
command is used.The latest release of the
update-ca-trust
requires the --output param if you run as non-root user.ISSUE TYPE
ADDITIONAL INFORMATION
See: https://gitlab.com/redhat/centos-stream/rpms/ca-certificates/-/commit/81a090f89a413487bb8a8677eff9bb4fb8bfbf71
And: ansible/awx-ee#258 (comment)
Fixes: ansible/awx-ee#258
Before the init pod
init-bundle-ca-trust
failed with the following error message: