We've deployed Tinkerbell in an isolated environment and redirected all the quay and docker images to point to our internal harbor image, and it works fine even with the download-hook container after injecting our CA certificate into the container using postRenderer patches.
However I cannot figure out how to add our CA into the downloaded hookOS which gets booted on the servers so the tinker-agent can never gets downloaded there.
How can one add a trusted CA into this part of the chain?
Thank you!
We've deployed Tinkerbell in an isolated environment and redirected all the quay and docker images to point to our internal harbor image, and it works fine even with the download-hook container after injecting our CA certificate into the container using postRenderer patches.
However I cannot figure out how to add our CA into the downloaded hookOS which gets booted on the servers so the tinker-agent can never gets downloaded there.
How can one add a trusted CA into this part of the chain?
Thank you!