Stefano Cenizzi

Yes, you have to add the CA on that path. I guess the agent would load that path automatically and run update-ca-certs to add ca inside OS boundle. Anyway the...

I think this is the line that add CA.crt to agent [here](https://github.com/rancher/rancher/blob/master/agent/run.sh#L7). Running as --privileged can get that crt easily.

Better to use CAAPH: ``` apiVersion: addons.cluster.x-k8s.io/v1alpha1 kind: HelmChartProxy metadata: name: openstack-ccm namespace: spec: clusterSelector: matchLabels: clusterName: repoURL: https://kubernetes.github.io/cloud-provider-openstack chartName: openstack-cloud-controller-manager version: 2.30.0 options: waitForJobs: true wait: true timeout: 5m...

I've compiled with the new gophercloud 2.8.0 some days ago and is working without any nginx workaround.