Skip to content

Upstream 1985 - Fix installer update-ca-trust command - #31

Merged
cigamit merged 1 commit into
ctrliq:develfrom
2and3makes23:upstream_pr_1985
Aug 20, 2026
Merged

cigamit merged 1 commit into
ctrliq:develfrom
2and3makes23:upstream_pr_1985

Conversation

@2and3makes23

@2and3makes23 2and3makes23 commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Upstream PR 1985 by @JoelKle: ansible/awx-operator@04f756b

The latest release of the update-ca-trust requires the --output param if you run as non-root user.

See: https://gitlab.com/redhat/centos-stream/rpms/ca-certificates/-/commit/81a090f89a413487bb8a8677eff9bb4fb8bfbf71
And: ansible/awx-ee#258 (comment)

Fixes: ansible/awx-ee#258

PR 1985 fixes a problem still present in Ascender-Operator 25.5.1 when using the bundle_cacert_secret setting:

  • on OpenShift the init-bundle-ca-trust container fails with ln: failed to create symbolic link '/etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt': Permission denied when executing update-ca-trust extract without --output /etc/pki/ca-trust/extracted

Original upstream commit by @JoelKle: ansible/awx-operator@04f756b

The latest release of the update-ca-trust requires the --output param
if you run as non-root user.

See: https://gitlab.com/redhat/centos-stream/rpms/ca-certificates/-/commit/81a090f89a413487bb8a8677eff9bb4fb8bfbf71
And: ansible/awx-ee#258 (comment)

Fixes: ansible/awx-ee#258
@2and3makes23 2and3makes23 changed the title Fix installer update-ca-trust command Upstream 1985 - Fix installer update-ca-trust command Aug 12, 2026
@2and3makes23

Copy link
Copy Markdown
Contributor Author

With custom CA certs placed by init-bundle-ca-trust container I am able to run

import requests
requests.get('https://custom-example.com')

within /var/lib/awx/venv/awx/ even without setting the REQUESTS_CA_BUNDLE env variable.

@cigamit cigamit self-assigned this Aug 20, 2026
@cigamit cigamit added the bug Something isn't working label Aug 20, 2026
@cigamit
cigamit merged commit 99eae43 into ctrliq:devel Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Development

Successfully merging this pull request may close these issues.

image awx-ee:latest broken for use with awx-operator

2 participants