best practice for corporate ca

[poblin-orange]

Hello
In my environement kairos k3s needs to pull images from a corporate docker registry, exposed on a corporate ca https url.
What is the best practices to achieve this ?
thks

[mauromorales]

I think this is still in progress, you can follow up #513 and #1288

[poblin-orange]

Not sure #513, looks different from my issue (which is runtime related, having the running k3s to be able to join runtime corporate registry).

I did achieve it with k3s registries.yaml configuration. Was wondering if ca could be set at os level.

[jimmykarily]

@poblin-orange you can install it here: https://github.com/kairos-io/packages/blob/974753f40809e341081912487ad6a7d03502a111/packages/static/kairos-overlay-files/files/system/oem/00_rootfs.yaml#L25 . This directory is writable and persistent.