From 96794d86300129a40655a19e4dd1402eb15e123f Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Wed, 18 Dec 2019 21:37:48 +0000 Subject: fix(cgit-taz): Force gcloud to use specific CA bundle It doesn't like reading the bundle from /etc/ssl apparently. --- services/cgit-taz/default.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/services/cgit-taz/default.nix b/services/cgit-taz/default.nix index 94fd6fe5f4..5fce2f2aab 100644 --- a/services/cgit-taz/default.nix +++ b/services/cgit-taz/default.nix @@ -54,6 +54,9 @@ let patches = [ ./cgit_idx.patch thttpdConfigPatch ]; }); in writeShellScriptBin "cgit-launch" '' + # v0v + gcloud config set core/custom_ca_certs_file ${cacert}/etc/ssl/certs/ca-bundle.crt + # The role account that this container is running at in Kubernetes # has permission to clone the repository. ${google-cloud-sdk}/bin/gcloud source repos --project tazjins-infrastructure clone depot /git/depot -- cgit 1.4.1