[feature] Configure custom CA cert environment variables

[alyssacgoins]

Feature Area

What feature would you like to see?

When a custom CA path is added to the launcher (added in #12082 ) the variables REQUESTS_CA_BUNDLE, AWS_CA_BUNDLE and SSL_CERT_FILE are set by the KFP launcher for the executor: https://github.com/kubeflow/pipelines/blob/master/backend/src/v2/component/launcher_v2.go#L527-L538 . It would be useful to configure the launcher to take input variable names and only set those specified variables.

What is the use case or pain point?

It would be useful to be able to set specific, necessary CA cert environment variables and avoid setting variables not necessary for the use case.

Is there a workaround currently?

Currently REQUESTS_CA_BUNDLE, AWS_CA_BUNDLE and SSL_CERT_FILE are set by the KFP launcher.

---

Love this idea? Give it a 👍.

[yashgoyal0110]

Hey @alyssacgoins I want to work on this. Assign please!

[rahul810050]

Hi @alyssacgoins I have opened a PR that implements this feature: #12473.

In this PR, I added support for configuring which CA-related environment variables the launcher sets when a custom CA certificate path is provided. If the list is not specified, the launcher keeps the historical behavior and sets REQUESTS_CA_BUNDLE, AWS_CA_BUNDLE, and SSL_CERT_FILE by default.

Please take a look and let me know if any further changes are needed. 🙌