Inject CA trust bundle into managed containers and set SSL_CERT_DIR

[osmman]

related to https://issues.redhat.com/browse/SECURESIGN-703 and https://issues.redhat.com/browse/SECURESIGN-1037

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: osmman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [osmman]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[bouskaJ]

Can you create e2e test for this feature?

[bouskaJ]

Can you create e2e test for this feature?

I mean can modify the CI to use keycloak (self signed) route instead of the insecure service https://github.com/securesign/secure-sign-operator/blob/main/.github/workflows/main.yml#L187 This should verify kuberoot CA injection AFIK

I am not sure how to test the annotation injection. But with that ^^ we will know that the volume is correctly mounted and the ENV property works fine

[osmman]

Can you create e2e test for this feature?

I mean can modify the CI to use keycloak (self signed) route instead of the insecure service https://github.com/securesign/secure-sign-operator/blob/main/.github/workflows/main.yml#L187 This should verify kuberoot CA injection AFIK

I am not sure how to test the annotation injection. But with that ^^ we will know that the volume is correctly mounted and the ENV property works fine

Yes, that will be good to modify Keycloack deployment on Kind cluster. I think Openshift CI uses self signed certificates if I remember correctly.

[bouskaJ]

/lgtm

[osmman]

/retest

[bouskaJ]

/lgtm

[osmman]

/test tas-operator-e2e