Chapter 14. Setting up additional trusted certificate authorities for builds

Procedure

1. Create a

   ConfigMap

   in the

   openshift-config

   namespace containing the trusted certificates for the registries that use self-signed certificates. For each CA file, ensure the key in the

   ConfigMap

   is the hostname of the registry in the

   hostname[..port]

   format:

   $ oc create configmap registry-cas -n openshift-config \
   --from-file=myregistry.corp.com..5000=/etc/docker/certs.d/myregistry.corp.com:5000/ca.crt \
   --from-file=otherregistry.com=/etc/docker/certs.d/otherregistry.com/ca.crt

2. Update the cluster image configuration:

   $ oc patch image.config.openshift.io/cluster --patch '{"spec":{"additionalTrustedCA":{"name":"registry-cas"}}}' --type=merge