adding SSL CERT configuration to containers

kurtosis-tech · Jul 4, 2024 · 8d72b92 · 8d72b92
1 parent 1b37102
commit 8d72b92
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/flake.nix b/flake.nix
@@ -158,6 +158,7 @@
                           container_pkgs.nettools
                           container_pkgs.gnugrep
                           container_pkgs.coreutils
+                          container_pkgs.cacert
                         ];
                         pathsToLink = ["/bin"];
                       };
@@ -166,6 +167,7 @@
                         if !needsCrossCompilation
                         then ["${service}/bin/${service.pname}"]
                         else ["${service}/bin/${os}_${arch}/${service.pname}"];
+                      config.Env = ["SSL_CERT_FILE=${container_pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"];
                     };
                 };
               }) {

diff --git a/kardinal-manager/kardinal-manager/fetcher/fetcher.go b/kardinal-manager/kardinal-manager/fetcher/fetcher.go
@@ -84,6 +84,7 @@ func (fetcher *fetcher) getClusterResourcesFromCloud() (*types.ClusterResources,
 		return nil, stacktrace.Propagate(err, "Error fetching cluster resources from endpoint '%s'", fetcher.configEndpoint)
 	}
 	defer resp.Body.Close()
+	logrus.Debugf("Fetching cluster resources from endpoint '%s'", fetcher.configEndpoint)
 
 	responseBodyBytes, err := io.ReadAll(resp.Body)
 	if err != nil {