From 96794d86300129a40655a19e4dd1402eb15e123f Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Wed, 18 Dec 2019 21:37:48 +0000
Subject: fix(cgit-taz): Force gcloud to use specific CA bundle

It doesn't like reading the bundle from /etc/ssl apparently.
---
 services/cgit-taz/default.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'services/cgit-taz')

diff --git a/services/cgit-taz/default.nix b/services/cgit-taz/default.nix
index 94fd6fe5f445..5fce2f2aab5a 100644
--- a/services/cgit-taz/default.nix
+++ b/services/cgit-taz/default.nix
@@ -54,6 +54,9 @@ let
     patches = [ ./cgit_idx.patch thttpdConfigPatch ];
   });
 in writeShellScriptBin "cgit-launch" ''
+  # v0v
+  gcloud config set core/custom_ca_certs_file ${cacert}/etc/ssl/certs/ca-bundle.crt
+
   # The role account that this container is running at in Kubernetes
   # has permission to clone the repository.
   ${google-cloud-sdk}/bin/gcloud source repos --project tazjins-infrastructure clone depot /git/depot
-- 
cgit 1.4.1