How to configure git for tls and SSL in updatecli

[aki59]

I am trying to fetch my repo in the scm configuration, it is failing with

Get "https://myrepo/info/refs?service=git-upload-pack":tls: failed to verify certificate x509: certificate signed by unknown authority

I am using official updatecli docker image from ghcr running on my Jenkins cloud.

Other thing is i am able to clone my repo fine if I am just trying git clone in Jenkins stage. With SSL verify as no.

Even disable-tls flag is not working as expected.

Using this command:

updatecli diff --disable-tls --config ./updatecli/updatecli.d --values ./updatecli/values.yaml

[dduportal]

Hi @aki59 it looks like the environment in which you are executing updatecli is missing the "usual" set of base certificates in the system root trust store.
It is usually a package named ca-certificates in most of the Linux distributions: https://documentation.ubuntu.com/server/how-to/security/install-a-root-ca-certificate-in-the-trust-store/index.html or https://pkgs.alpinelinux.org/package/edge/main/x86/ca-certificates for instance

[aki59]

It worked post adding proxy bump certificate in the git config