fix: update ENC script CA certificate path

- Mount vault-ca-cert secret at /opt/vault-ca-cert.crt in both deployments - Update cobbler-enc script to use correct CA certificate path - Resolves OSError about missing TLS CA certificate bundle
2026-03-20 22:57:30 +11:00
parent f474c5c530
commit 9ebdd900a9
3 changed files with 13 additions and 1 deletions
@@ -20,7 +20,7 @@ def fetch_enc_data(cobbler_url: str, hostname: str) -> str:
    """
    url = f"{cobbler_url}/cblr/svc/op/puppet/hostname/{hostname}"
    try:
-        response = requests.get(url, verify='/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem')
+        response = requests.get(url, verify='/opt/vault-ca-cert.crt')
        response.raise_for_status()
    except requests.RequestException as e:
        sys.exit(f"Request failed: {e}")