From f3d4cb105ad63bac99494d64b8c99805f76bb946 Mon Sep 17 00:00:00 2001 From: Webb Scales Date: Mon, 21 Aug 2023 15:29:20 -0400 Subject: [PATCH] Add RH CA certs to the containerized Agent base container --- agent/containers/images/Dockerfile.base.j2 | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/agent/containers/images/Dockerfile.base.j2 b/agent/containers/images/Dockerfile.base.j2 index 40161195b3..a09d0a3d96 100644 --- a/agent/containers/images/Dockerfile.base.j2 +++ b/agent/containers/images/Dockerfile.base.j2 @@ -4,6 +4,15 @@ # {{ distro_name }} pbench-agent base image FROM {{ image_repo }}/{{ image_name }}:{{ image_tag }} +# Since the Pbench Server requires TLS access and it is hosted on an internal +# Red Hat host, we need the Red Hat CA certificates in order to validate the +# connection to it when we upload results. +ADD \ + https://certs.corp.redhat.com/certs/2015-IT-Root-CA.pem \ + https://certs.corp.redhat.com/certs/2022-IT-Root-CA.pem \ + /etc/pki/ca-trust/source/anchors/ +RUN update-ca-trust + # Install the appropriate pbench repository file for {{ distro_name }}. COPY ./{{ pbench_repo_file }} /etc/yum.repos.d/pbench.repo