Hey there, while exposing with a self-signed certificate vllm container on a GPU box on-prem, I did not find a good way to add the Root CA to the discourse container so it can access securely this on-prem service over https.
e.g.:
./launcher enter app
curl -L https://vllm.infra.example.com/v1/models
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Is there a good way to add a self-signed root ca-certificate in the discourse container which would survive container image updates?
As far as I know adding it in the app.yml
run:
- exec: wget ... && update-ca-certificates
would only work well while building/rebuilding the app.
Any hint welcomed.