Chapter 5. Adding additional Certificate Authorities to the Red Hat Quay container

Procedure

1. View the certificate to be added to the container by entering the following command:

   $ cat storage.crt

   Example output

   -----BEGIN CERTIFICATE-----
   MIIDTTCCAjWgAwIBAgIJAMVr9ngjJhzbMA0GCSqGSIb3DQEBCwUAMD0xCzAJBgNV...
   -----END CERTIFICATE-----

2. Create the extra_ca_certs in the /config folder of your Red Hat Quay directory by entering the following command:

   $ mkdir -p /path/to/quay_config_folder/extra_ca_certs

3. Copy the CA file to the extra_ca_certs folder. For example:

   $ cp storage.crt /path/to/quay_config_folder/extra_ca_certs/

4. Ensure that the storage.crt file exists within the extra_ca_certs folder by entering the following command:

   $ tree /path/to/quay_config_folder/extra_ca_certs

   Example output

   /path/to/quay_config_folder/extra_ca_certs
   ├── storage.crt----

5. Obtain the CONTAINER ID of your Quay consider by entering the following command:

   $ podman ps

   Example output

   CONTAINER ID        IMAGE                                COMMAND                  CREATED             STATUS              PORTS
   5a3e82c4a75f        <registry>/<repo>/quay:{productminv} "/sbin/my_init"          24 hours ago        Up 18 hours         0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp, 443/tcp   grave_keller

6. Restart the container by entering the following command

   $ podman restart 5a3e82c4a75f

7. Confirm that the certificate was copied into the container namespace by running the following command:

   $ podman exec -it 5a3e82c4a75f cat /etc/ssl/certs/storage.pem

   Example output

   -----BEGIN CERTIFICATE-----
   MIIDTTCCAjWgAwIBAgIJAMVr9ngjJhzbMA0GCSqGSIb3DQEBCwUAMD0xCzAJBgNV...
   -----END CERTIFICATE-----