<p>I have a Microk8s cluster running gitea, harbor and droneci. Everything is hosted under *.dev.mydomain.com and there is a wildcard certificate for that. The certificate is signed using a private CA.</p>
<p>I'm trying to push the CA certificate to the Pods running the Drone CI builds such that they can push/pull from Gitea and Harbor while also being able to connect to external sources to (to fetch other docker images from dockerhub for example).</p>
<p>DroneCI and the drone runner are installed using Helm. I have tried the following in the <code>values.yaml</code> file for the runner:</p>
<pre><code>DRONE_RUNNER_VOLUMES: &quot;/sslcerts:/etc/ssl/certs&quot;
</code></pre>
<p>This overwrites the <code>/etc/ssl/certs/</code> folder in the runner pod. Any requests made from the pod to harbor or gitea work, any requests to anything else fail with error <code>x509 certificate signed by unknown authority</code></p>
<p>I also tried</p>
<pre><code>DRONE_RUNNER_VOLUMES: &quot;/sslcerts/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt&quot;
</code></pre>
<p>This returned the error <code>mounting &quot;/sslcerts/ca-certificates.crt&quot; to rootfs at &quot;/etc/ssl/certs/ca-certificates.crt&quot; caused: mount through procfd: not a directory: unknown&quot;</code></p>
<p>Any ideas on how to go about what I'm trying to do? Thanks!</p>

Constantine Loukas
<p>As the runners are Alpine Linux based all you should have to do is to mount your certificates in the <code>/usr/local/share/ca-certificates/</code> folder (<em>not</em> in a subfolder but right into that folder).
Alpine should then add all certificates from there to <code>/etc/ssl/certs</code> for you.</p>
