The container does not support self-signed certs with the RMT Server chart

[Evantage-WS]

Tested with version 2.18 on K3s 1.30.3

The problem is at line 122 with the rmt-client-setup-res script. It is trying to get the cert from "https://" $3 "/rmt.crt", but that's unavailable in the container, the file does not exist.

When I manually save the cert to "/etc/pki/ca-trust/source/anchors/rmt.crt" and execute:

    /usr/bin/update-ca-trust enable
    /usr/bin/update-ca-trust extract

(As in the script), it is working.

Perhaps a secret mount can fix this.

[Evantage-WS]

Any update please?

[digitaltom]

The process of rmt-client-setup-res was designed for an RMT server that gets set up its SSL certificate with yast2-rmt in a non containerized/k8s environment.
When running rmt with the helm chart, I assume the SSL termination is managed by Traefik?
Can you propose how to change the script, so it downloads the cert correctly under those circumstances?

[Evantage-WS]

Hi, I used Ingress-NGINX, but the idea is the same. Please see mt first remark about possible solutions.