{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/minikube/issues/1408","repository_url":"https://api.github.com/repos/kubernetes/minikube","labels_url":"https://api.github.com/repos/kubernetes/minikube/issues/1408/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/minikube/issues/1408/comments","events_url":"https://api.github.com/repos/kubernetes/minikube/issues/1408/events","html_url":"https://github.com/kubernetes/minikube/issues/1408","id":224189042,"node_id":"MDU6SXNzdWUyMjQxODkwNDI=","number":1408,"title":"Unable to add corporate root SSL certificate to minikube VM for VirtualBox","user":{"login":"isuftin","id":928288,"node_id":"MDQ6VXNlcjkyODI4OA==","avatar_url":"https://avatars3.githubusercontent.com/u/928288?v=4","gravatar_id":"","url":"https://api.github.com/users/isuftin","html_url":"https://github.com/isuftin","followers_url":"https://api.github.com/users/isuftin/followers","following_url":"https://api.github.com/users/isuftin/following{/other_user}","gists_url":"https://api.github.com/users/isuftin/gists{/gist_id}","starred_url":"https://api.github.com/users/isuftin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/isuftin/subscriptions","organizations_url":"https://api.github.com/users/isuftin/orgs","repos_url":"https://api.github.com/users/isuftin/repos","events_url":"https://api.github.com/users/isuftin/events{/privacy}","received_events_url":"https://api.github.com/users/isuftin/received_events","type":"User","site_admin":false},"labels":[{"id":465594246,"node_id":"MDU6TGFiZWw0NjU1OTQyNDY=","url":"https://api.github.com/repos/kubernetes/minikube/labels/iso/minikube-iso","name":"iso/minikube-iso","color":"bfd4f2","default":false},{"id":358920088,"node_id":"MDU6TGFiZWwzNTg5MjAwODg=","url":"https://api.github.com/repos/kubernetes/minikube/labels/kind/bug","name":"kind/bug","color":"e11d21","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":21,"created_at":"2017-04-25T15:59:25Z","updated_at":"2018-08-13T22:09:53Z","closed_at":null,"author_association":"NONE","body":"This is a question/feature request.\r\n\r\nI am currently operating minikube on a network that requires all SSL traffic to be intercepted using a root SSL certificate.  Minikube is using the Virtualbox driver.\r\n\r\nUsing docker-machine and boot2docker, I was able to add my root certificate to I need to be able to append my SSL root cert to the /var/lib/boot2docker/certs directory. This does not work with the minikube ISO. What does work is appending my certificate to /etc/ssl/certs/ca-certificates.crt\r\n\r\nI create a bootlocal.sh for this. This is the command I run from my host: \r\n```\r\nread -d '' String <<\"EOF\"\r\n#!/bin/bash\r\ngrep -q '<single line from root cert>' /etc/ssl/certs/ca-certificates.crt\r\nEXIT_CODE=\\\\$?\r\nif [ \\\\$EXIT_CODE -ne 0 ]; then\r\n  curl http://<rootcert location>/root.cer | sudo tee -a /etc/ssl/certs/ca-certificates.crt\r\n  sudo systemctl restart docker.service\r\nfi\r\nEOF\r\necho \"echo \"\\\"\"${String}\"\\\"\" | sudo tee -a /var/lib/boot2docker/bootlocal.sh && sudo chmod +x /var/lib/boot2docker/bootlocal.sh && /var/lib/boot2docker/bootlocal.sh\" | minikube ssh \r\n```\r\n\r\nThis works fine until I restart the VM. It looks like what's happening is that bootlocal may be running first or not at all because when the machine restarts, ca-certificates.crt is back to the original state without my certificate in it. \r\n\r\nHow should I add my root SSL cert into the VM so Docker can pull from registries?\r\n\r\nminikube version: v0.18.0\r\nOS: OSX 10.10.5\r\nDrivername: Virtualbox\r\nISO: minikube-v0.18.0.iso\r\nInstall Tools: homebrew\r\n\r\n**What happened**:\r\n\r\nCorporate root SSL certificate does not exist on the VM and is not picked up by the Docker daemon\r\n\r\n**What you expected to happen**:\r\n\r\nI expect to be able to add my root SSL certificate to the VM and have Docker be able to pick it up to validate TLS communication\r\n\r\n**How to reproduce it** (as minimally and precisely as possible):\r\n\r\n```\r\n$ minikube start\r\n\r\n< run above commandset to pull down any SSL cert >\r\n\r\n$ minikube stop && minikube start\r\n\r\n< verify that SSL cert does not exist in ca-certificates.crt >\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/minikube/issues/comments/412682102","html_url":"https://github.com/kubernetes/minikube/issues/1408#issuecomment-412682102","issue_url":"https://api.github.com/repos/kubernetes/minikube/issues/1408","id":412682102,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMjY4MjEwMg==","user":{"login":"rhetzler","id":854859,"node_id":"MDQ6VXNlcjg1NDg1OQ==","avatar_url":"https://avatars3.githubusercontent.com/u/854859?v=4","gravatar_id":"","url":"https://api.github.com/users/rhetzler","html_url":"https://github.com/rhetzler","followers_url":"https://api.github.com/users/rhetzler/followers","following_url":"https://api.github.com/users/rhetzler/following{/other_user}","gists_url":"https://api.github.com/users/rhetzler/gists{/gist_id}","starred_url":"https://api.github.com/users/rhetzler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhetzler/subscriptions","organizations_url":"https://api.github.com/users/rhetzler/orgs","repos_url":"https://api.github.com/users/rhetzler/repos","events_url":"https://api.github.com/users/rhetzler/events{/privacy}","received_events_url":"https://api.github.com/users/rhetzler/received_events","type":"User","site_admin":false},"created_at":"2018-08-13T22:09:53Z","updated_at":"2018-08-13T22:09:53Z","author_association":"NONE","body":"/remove-lifecycle rotten"}}
{"actor":{"display_login":"rhetzler"}}