dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

kubelet: Fix CA cert for Docker Hub proxy 

The man page for _containers-certs.d(5)_ says that subdirectories of
`/etc/containers/certs.d` should be named `host:port`, however, this is
a bit misleading.  It seems instead, the directory name must match the
name of the registry server as specified, so in the case of a server
that supports HTTPS on port 443, where the port would be omitted from
the image name, it must also be omitted from the `certs.d` subdirectory
name.
unifi-restore
Dustin 2025-07-16 16:05:19 -05:00
parent ba3f61fb08
commit f7546791cc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/kubelet.yml
View File

@ -18,6 +18,6 @@ container_registries:
prefix: docker.io prefix: docker.io
container_registry_certs: container_registry_certs:
docker-hub.proxy.pyrocufflink.blue:443: docker-hub.proxy.pyrocufflink.blue:
ca: >- ca: >-
{{ lookup('file', 'dch-root-ca-r2.crt') }} {{ lookup('file', 'dch-root-ca-r2.crt') }}