quay/container-security-operator

CSO to trust self signed certificate for private quay registry

gorantornqvist opened this issue · 3 comments

gorantornqvist commented

Hi,
I have installed CSO and added an image from my private quay registry.

Look like CSO cant connect to the private quay registry since I see this error in the operator logs:

level=error msg="Failed to sync layer data" key=quay/quay-clair-test-2-5ggnj err="Get https://quay.apps.mydomain.com/.well-known/app-capabilities: x509: certificate signed by unknown authority"

Is there a way to set an "insecure" option or to add additional CA certs to CSO?

abessifi commented

Same issue with the Quay Container Security v3.3.4.

abessifi commented

Fix: In the same namespace as the operator, create a secret called container-security-operator-extra-certs that contains the CA. Then restart the operator.

gorantornqvist commented

Thanks, works!