Does anyone have experience dealing with Netskope and Rancher Desktop? We are recently migrating to Rancher from Docker Desktop. As we migrate folks over we have been finding that Netskope is causing problems due to the difference in the way the Rancher Desktop works as compared to Docker Desktop. We've been adding individual exceptions to Netskope - but don't want to continue doing that. We're hoping to find an approach that doesn't require us to modify every app/system to include the Netskope Cert. Has anyone dealt with this in a nice and hopefully easy way?

The last comment on that issue says that upgrading to Rancher Desktop 1.15.1 fixed the issue for that person. I assume you are on a later version than that, ideally 1.20.0, but want to make sure

Thanks for the reply Jan. It looks like the individual that upgraded was on Windows. We are on MacOS, and are updated to 1.20.0.

So do the names resolve on macOS, but not inside the VM? Can you

curl

or whatever them from the host, but not inside the guest?

We end up getting ssl/certificate errors for external requests coming from the containers. From the host is fine, because our IT/Security has put the Netskope cert on our local machines.

I wonder where those certificates have been installed. Rancher Desktop automatically imports root certificates from all known keychains:

❯ security list-keychains
    "/Users/jan/Library/Keychains/login.keychain-db"
    "/Library/Keychains/System.keychain"

And additionally from

/System/Library/Keychains/SystemRootCertificates.keychain