Skip to content

[WIP] Add command to export certificates for Docker registry trust - #557

Closed
greghaynes with Copilot wants to merge 2 commits into
get-certificate-commandfrom
copilot/sub-pr-555
Closed

[WIP] Add command to export certificates for Docker registry trust#557
greghaynes with Copilot wants to merge 2 commits into
get-certificate-commandfrom
copilot/sub-pr-555

Conversation

Copilot AI commented Dec 19, 2025

Copy link
Copy Markdown
Contributor

Thanks for the feedback on #555. I've created this new PR, which merges into #555, to address your comment. I will work on the changes and keep this PR's description up to date as I make progress.

Original PR: #555
Triggering comment (#555 (comment)):

@copilot merge in main


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

greghaynes and others added 2 commits December 18, 2025 20:46
Implements 'idpbuilder get certificate' command to export the self-signed
TLS certificate from the cluster. This solves the Docker trust issue with
the Gitea container registry without requiring a Docker daemon restart.

Features:
- Default: Prints certificate to stdout for flexibility
- --docker flag: Exports to Docker's per-registry cert directory
  (~/.docker/certs.d/<registry-host>/ca.crt)
- --output flag: Exports to a custom file path
- Provides platform-specific instructions for system-wide trust
- Works without Docker restart, avoiding cluster shutdown

Includes comprehensive test coverage for certificate retrieval,
file operations, registry host determination, and command flags.

Signed-off-by: Greg Haynes <greg@greghaynes.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants