-For KOTS installations, PrivateCACert returns the name of a ConfigMap that contains CA certificates provided by the end user with the `--private-ca-configmap` flag for the install command. For Embedded Cluster installations, the ConfigMap returned by PrivateCACert contains the CA trust store from the host. The CA trust store is determined by first checking for the SSL_CERT_FILE environment variable. If SSL_CERT_FILE is not set, KOTS then searches common certificate paths and uses the first valid certificate file found.
0 commit comments