Kent Rancourt
Kent Rancourt
We can take another look at this, with the caveat that this is a very low priority.
I'm pinning this because a lot of people have brought this up and I don't want lots of duplicate issues. Also my response is a general one informed by multiple...
@lknite are you using Dex?
And the failure is occurring right when the API server starts?
Ok. Got it. I am thinking back to when we first did the ODIC integration and trying to recall why I wouldn't have made provisions for a custom CA bundle...
@lknite thanks for the details. I get how you're distributing CA bundles around to things _in Kubernetes_. But what happens with interactions between the user's browser and the IDP? There...
Ok. Makes sense! Consider me convinced that it's not only people who have thrown caution to the wind (case 2) who would benefit from this. I'll put some thought into...
@lknite no. This hasn't been assigned to any milestone yet. In light of current internal priorities, a community contribution might be the fastest path to getting this done.
It's a long story, but anyone who's worked with Git via Go for long enough is familiar -- all our Git operations are actually implemented by exec'ing the `git` CLI....
Thank you @etetar. I'll try replicating this.