Setup AAP Controller to trust a CA cert
AAP Controller does not read system PKI directory. So adding CA cert to /etc/pki/ca-trust/source/anchors directory
and run update-ca-trust
is not enough. It will still return SSL error when pulling execution image, for example.
Add the following into /etc/supervisord.d/tower.ini
file:
[supervisord]
...
environment=REQUESTS_CA_BUNDLE=/etc/pki/ca-trust/source/anchors/lets-encrypt-r3.pem
...
Then restart
automation-controller-service restart supervisord
Leave a comment