search

shiftstack / dev-install

13 stars 16 forks source link

Create and use user-local copy of ca cert #87

Closed mdbooth closed 3 years ago

mdbooth commented 3 years ago

This allows referencing the CA cert without putting it in the local host trust bundle.

/cc @mandre

EmilienM commented 3 years ago

If you set update_local_pki to False (the default), the CA won't be in the local host trust bundle. So why do we need this PR?

mdbooth commented 3 years ago

If you set update_local_pki to False (the default), the CA won't be in the local host trust bundle. So why do we need this PR?

We need this precisely to work in this case. If you set update_local_pki to false you will still have a working clouds.yaml with this change. Without this change it doesn't work.