[caasp-beta] kubernetes dashboard image pull error

[Thorsten Kukuk]

Hi,

On Thu, May 18, Hwang Jerry wrote:

> For SLES, I can import the SSL proxy cert, however not possible on MicroOS for
> readonly file system.

That's a problem currently with CaaSP, correct.
The read-only root filesystem isn't that problem, you can still copy
the files into the /etc/... directory hierachy. The problem is a limitation
of openssl ...

We are working on this, but this is not an easily to solve problem.

But, what you can do is: put your certificates in a RPM, call
update-ca-certificates in the post install section, and add the
repository as additional installation source (zypper ar, cloud-init
add_repo, ...).
This has also the advantage, that you don't need to manually update the
certificate on all machines, but if you release a new RPM, all machines
will automatically install it.

  Thorsten

-- 
Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & CaaSP
SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany
GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg)