fix: take into account all certificates located in /public-certs

[vitaliy-guliy]

What does this PR do?

On each container run

• checks for /tmp/che/secret/ca.crt and for all certificates in /public-certs
• combines all found certificates in one /tmp/node-extra-certificates/ca.crt
• initializes NODE_EXTRA_CA_CERTS environment variable with /tmp/node-extra-certificates/ca.crt

What issues does this PR fix?

eclipse-che/che#22277

How to test this PR?

1. Use prepared sample to test the changes using che-code image, built by github action ( see comments below )

To test:

• create a repository from https://github.com/vitaliy-guliy/web-nodejs-sample/tree/test-public-certs-pr243
• open a terminal, run env | grep NODE_EXTRA_CA_CERTS to ensure NODE_EXTRA_CA_CERTS is set and points to a real certificate
• run cat /checode/entrypoint-volume.sh and check the changes provided by this pull request are present in the file

2. The second one:

• clone the repository, checkout this branch
• build che-code docker image by hands, upload to your quay.io account
• fork any sample, define .che/che-editor.yaml, specify che-code image
• create a workspace from the fork

3. I build che-code docker image locally and prepared a sample.

To test:

• create a repository from https://github.com/vitaliy-guliy/web-nodejs-sample/tree/test-public-certs
• open a terminal, run env | grep NODE_EXTRA_CA_CERTS to ensure NODE_EXTRA_CA_CERTS is set and points to a real certificate

[github-actions]

Click here to review and test in web IDE:

[github-actions]

Pull Request images published ✨
image: quay.io/che-incubator-pull-requests/che-code:pr-243-amd64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-243-dev-amd64

[github-actions]

Pull Request images published ✨
image: quay.io/che-incubator-pull-requests/che-code:pr-243-amd64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-243-dev-amd64

[tolusha]

Works as expected.

[RomanNikitenko]

Tested first use case + tried to add a test-certificate to the /tmp/che/secret/ca.crt to test how it's combined.
All certificates were put to the /tmp/node-extra-certificates/ca.crt
I noticed:

but, I guess, it's because my original test-certificate file was without empty line at the end...

[vitaliy-guliy]

Tested first use case + tried to add a test-certificate to the /tmp/che/secret/ca.crt to test how it's combined. All certificates were put to the /tmp/node-extra-certificates/ca.crt I noticed: but, I guess, it's because my original test-certificate file was without empty line at the end...

Nice catch!
The resulting certificate must always be in a proper format, I've added a fix for that case.
Thanks.

[github-actions]

Pull Request images published ✨
image: quay.io/che-incubator-pull-requests/che-code:pr-243-amd64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-243-dev-amd64

[azatsarynnyy]

Thank you @vitaliy-guliy for working on the fix 👍
It must be the final step to fix the extensions installation in a proxied environment (CRW-3942) 🎉