Skip to content

Commit 17ddabe

Browse files
♻️ Add self-signed-certificate processing to dy-sidecar (ITISFoundation#3049)
* Add self-signed-cert processing to dy-sidecar * Improve comment Co-authored-by: oSparc DevOps <[email protected]>
1 parent 29daade commit 17ddabe

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

services/dynamic-sidecar/docker/entrypoint.sh

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,13 @@ INFO="INFO: [$(basename "$0")] "
88
WARNING="WARNING: [$(basename "$0")] "
99
ERROR="ERROR: [$(basename "$0")] "
1010

11+
# Read self-signed SSH certificates (if applicable)
12+
#
13+
# In case a dynamic sidecar must access a docker registry in a secure way using
14+
# non-standard certificates (e.g. such as self-signed certificates), this call is needed.
15+
# It needs to be executed as root.
16+
update-ca-certificates
17+
1118
# This entrypoint script:
1219
#
1320
# - Executes *inside* of the container upon start as --user [default root]
@@ -94,7 +101,7 @@ fi
94101
chown --verbose --recursive "$SC_USER_NAME":"$GROUPNAME" "${DY_VOLUMES}"
95102
# Allow owner and group to edit write and execute
96103
# files from all the subdirectories
97-
# When the service access files downloaded by the dynamic-sidecar
104+
# When the service access files downloaded by the dynamic-sidecar
98105
# it uses group permissions
99106
chmod --verbose --recursive 774 "${DY_VOLUMES}"
100107

0 commit comments

Comments
 (0)