Hello everybody,

today I tried to configure my CI/CD pipeline with my custom registry. It also has a custom SSL certificate. When I try using the build step I always get the error, that my registry's certificate is signed by an unknown CA, however, when I installed onedev on Kubernetes I added my CA-certificate as base64-encoded PEM.

tls: failed to verify certificate: x509: certificate signed by unknown authority

I exported my CAs from windows, converted them with openssl to PEM and imported them into Kubernetes with the command which was given in the docs. In Kubernetes I then have two certificates:

key: root.crt
value: <crt>
key: intermediate.crt
value: <crt>

When I open a shell on the Pod (after re-installing it with helm) I cannot curl the registry - I get an SSL error. (maybe this is intended?)

If I go to /opt/onedev/conf/trust-certs the values are there.

Maybe important: I installed the certificates after I installed OneDev, but re-installed OneDev afterwards. What step am I missing?

KR, Lukas