Hello everyone, I'm new here, and started using Rancher just recently. I'd appreciate your help with an issue I've trying to fix for days already:
I've setup a gitlab repository with a self-signed certificate, and as expected, I was getting a "SSL certificate problem: self-signed certificate in certificate chain . Will retry after 16m38s" message when trying to register a chart repository from it on my rancher setup (Rancher running on a Docker container). However, adding the ROOT CA of gitlab's server certificate as described here:
https://ranchermanager.docs.rancher.com/reference-guides/single-node-rancher-in-docker/advanced-options (using the SSL_CERT_DIR) doesn't fix the problem. I worked directly on shell within rancher's container, but the command update-ca-certificates doesn't provide any feedback, and when trying to do a git clone or 'curl' to the gitlab server I'm still getting the certificate issue. I also tested the same ROOT CA by registering it on a Windows host and I can open the gitlab server there with no issues.
Most of the documentation is about using a certificate for rancher's clients to trust it, but I haven't figured out how to enable rancher to trust self-signed gitlab servers.
So a few questions:
• Any advice on how to diagnose whats going on?
• Is there a way to register a root CA on the rancher's image at OS level (not only for rancher)? On the ubuntu host this container is running on the 'update-ca-certificates' command work as expected, and I can access the gitlab server with no problems from there.
Thanks again in advance for any advice!