pkg/resource: invoke update-ca-trust extract with --output

flavianmissi · flavianmissi · commit 9625bf48f550 · 2024-08-22T16:06:05.000+02:00
using this might help keep write permissions on
/etc/pki/ca-trust/extracted/pem/directory-hash.
diff --git a/pkg/resource/podtemplatespec.go b/pkg/resource/podtemplatespec.go
@@ -486,7 +486,7 @@ func makePodTemplateSpec(coreClient coreset.CoreV1Interface, proxyLister configl
 					Command: []string{
 						"/bin/sh",
 						"-c",
-						"mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem && update-ca-trust extract && exec /usr/bin/dockerregistry",
+						"mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem && update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec /usr/bin/dockerregistry",
 					},
 					Ports: []corev1.ContainerPort{
 						{

Original file line number	Diff line number	Diff line change
`@@ -486,7 +486,7 @@ func makePodTemplateSpec(coreClient coreset.CoreV1Interface, proxyLister configl`
`486`	`486`	`Command: []string{`
`487`	`487`	`"/bin/sh",`
`488`	`488`	`"-c",`
`489`		`- "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem && update-ca-trust extract && exec /usr/bin/dockerregistry",`
	`489`	`+ "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem && update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec /usr/bin/dockerregistry",`
`490`	`490`	`},`
`491`	`491`	`Ports: []corev1.ContainerPort{`
`492`	`492`	`{`