Enhance OVIS setup script to handle missing CA directory and refine logging

Updated the ovis-setup.sh script to improve handling of the trusted CA directory, ensuring that the oauth2-proxy uses the system trust store if the directory is missing. Adjusted logging messages for clarity regarding the detection of custom OIDC CA files, specifically focusing on .crt files. Additionally, added a new environment variable for TLS_CA_CERTIFICATES_DIR in the ovis-compose.yml file to support trusted CA certificates.
This commit is contained in:
tm16-medma
2026-03-26 16:16:21 +01:00
parent fd2cf2dead
commit 3cb1d70416
2 changed files with 9 additions and 5 deletions

View File

@@ -6,6 +6,7 @@ services:
environment:
- http_proxy=http://forward_proxy:3128
- https_proxy=http://forward_proxy:3128
- TLS_CA_CERTIFICATES_DIR=/etc/bridgehead/trusted-ca-certs
- OAUTH2_PROXY_USE_SYSTEM_TRUST_STORE=true
- OAUTH2_PROXY_PROVIDER_CA_FILES=${OVIS_OAUTH2_PROXY_PROVIDER_CA_FILES}
- OAUTH2_PROXY_PROVIDER=oidc