Uploaded image for project: 'Red Hat OpenShift AI Engineering'
  1. Red Hat OpenShift AI Engineering
  2. RHOAIENG-6410

Cannot clone git repo via self-signed https in Elyra

XMLWordPrintable

    • RHOAI IDE - Boston
    • Testable

      I have setup own git host which is just an nginx server with self-signed https which hosts a file system with git repositories. The repo is prepared as follows

      cd /tmp/test-git
      git clone --bare --shared https://github.com/redhat-rhods-qe/ods-ci-notebooks-main.git
      cd ods-ci-notebooks-main.git
      git update-server-info
      

      Then, in Elyra I try to clone such a git repo but I'm getting an error (see the screenshot).

      The url is definitely available, the cert is also available at etc/pki/tls/custom-certs/ca-bundle.crt

      Workaround

      Set the following env variable

      GIT_SSL_CAINFO=/etc/pki/tls/custom-certs/ca-bundle.crt

      Dev

      1. Update the env var in Notebook-controller with GIT_SSL_CAINFO, so it adds it to all workbenchs
        https://github.com/opendatahub-io/kubeflow/blob/ee20d44d1ca3f85da8a25ac456e00aca28df5beb/components/odh-notebook-controller/controllers/notebook_webhook.go#L333
        https://github.com/opendatahub-io/kubeflow/blob/ee20d44d1ca3f85da8a25ac456e00aca28df5beb/components/odh-notebook-controller/controllers/notebook_controller.go#L378
        2. Verify, by creating a workbench, and check if the env var is included.

      QE

            rpattnai Ramakrishna Pattnaik
            apodhrad@redhat.com Andrej Podhradsky
            RHOAI IDE
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: