Users reported issues when installing customized widgets packaged as OCI containers due to certificate validation failures during the skopeo copy step in the init container. The root cause was the presence of a corporate CA not included in the default CA bundle.

Although the documentation (Installing and viewing plugins in RHDH) describes authentication setup, it does not explain how to handle environments that rely on a corporate CA. To resolve the issue, users must mount the trusted CA bundle to the init container at /etc/pki/tls/certs/ca-bundle.crt, enabling successful certificate validation.

Documentation Improvements:

• Add guidance for environments using a corporate CA during third-party plugin installation.
• Describe how to mount the trusted CA bundle and reference the appropriate path.
• Explain how this impacts skopeo copy operations during plugin installation.
• Link to existing guidance on CA bundle injection if applicable.

Reference:
Installing custom plugins in Red Hat Developer Hub