Skip to content

certificates: update the UBI paths for certificates, address perms

Jason Plum requested to merge ubi-certificates-extracted-path into master

What does this MR do?

certificates: update the UBI paths for certificates, address perms

Update the templates/_certificates.tpl to alter the mount and paths for /etc/pki/ca-trust/extracted, removing /pem from the end. This address concerns seen in some deployments of update-ca-trust failing with permissions on a file witin the openssl/ subdirectory.

All of the content within /etc/pki/ca-trust/extracted is generated on a per-run basis, so this is simply now inclusive all all content generated by the scripted patterns of update-ca-trust.

Changelog: changed

Related issues

Related to https://gitlab.com/gitlab-com/gl-infra/gitlab-dedicated/team/-/issues/6336

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch.
  • MR has a green pipeline.
  • Documentation created/updated.
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.

Reviewers checklist

Edited by Jason Plum

Merge request reports