Add optional custom ca_file_path setting to pack config

[danxg87]

Our use case / deployment of Netbox uses internal CA certificates that are not recognized/available in the current Netbox pack.

Adding a pack config to specify the custom ca_file_path, which then is set for netbox requests, would allow us to very easily change/use specific CA certificates AND ssl_verify: true without things exploding as the requests lib uses the default venv's cert file.

[nzlosh]

The environment variable REQUESTS_CA_BUNDLE can be set in /etc/default/st2actionrunner so processing this in the action should not be necessary.

# cat /etc/default/st2actionrunner 
REQUESTS_CA_BUNDLE='/etc/ssl/certs'

# st2ctl restart

# st2 run core.local cmd='echo $REQUESTS_CA_BUNDLE'
.
id: 6815c9337980ea9d95bb1101
action.ref: core.local
context.user: st2admin
parameters: 
  cmd: echo $REQUESTS_CA_BUNDLE
status: succeeded
start_timestamp: Sat, 03 May 2025 07:43:47 UTC
end_timestamp: Sat, 03 May 2025 07:43:47 UTC
result: 
  failed: false
  return_code: 0
  stderr: ''
  stdout: /etc/ssl/certs
  succeeded: true

When REQUESTS_CA_BUNDLE is detected by the requests module, it automatically enable tls verification.

[danxg87]

The environment variable REQUESTS_CA_BUNDLE can be set in /etc/default/st2actionrunner so processing this in the action should not be necessary.

# cat /etc/default/st2actionrunner 
REQUESTS_CA_BUNDLE='/etc/ssl/certs'

# st2ctl restart

# st2 run core.local cmd='echo $REQUESTS_CA_BUNDLE'
.
id: 6815c9337980ea9d95bb1101
action.ref: core.local
context.user: st2admin
parameters: 
  cmd: echo $REQUESTS_CA_BUNDLE
status: succeeded
start_timestamp: Sat, 03 May 2025 07:43:47 UTC
end_timestamp: Sat, 03 May 2025 07:43:47 UTC
result: 
  failed: false
  return_code: 0
  stderr: ''
  stdout: /etc/ssl/certs
  succeeded: true

When REQUESTS_CA_BUNDLE is detected by the requests module, it automatically enable tls verification.

TIL! TYVM! Closing this out in that case.