Stefano Cenizzi

Yes, you have to add the CA on that path. I guess the agent would load that path automatically and run update-ca-certs to add ca inside OS boundle. Anyway the...

I think this is the line that add CA.crt to agent [here](https://github.com/rancher/rancher/blob/master/agent/run.sh#L7). Running as --privileged can get that crt easily.