Using a custom ca during installation

[michaelkebe]

I tried adding a custom ca in the controlplane.yaml with a patch (https://www.talos.dev/v1.9/talos-guides/network/corporate-proxies/#appending-the-certificate-authority-of-mitm-proxies):

$ cat patch.yaml
machine:
    files:
        - permissions: 0o644
          path: /etc/ssl/certs/ca-certificates
          op: append
          content: |
            -----BEGIN CERTIFICATE-----
            ............
            -----END CERTIFICATE-----
$ talosctl gen config --config-patch-control-plane @patch.yaml talos-vbox-cluster https://$NODE_IP:6443

After booting into maintenance and talosctl -n $NODE_IP apply-config -f controlplane.yaml --insecure, the output in the dashboard is this:

Even creating an with the custom ca with kernel parameter: talos.config.inline=.... does not help. (https://www.talos.dev/v1.9/reference/kernel/#talosconfiginline).

I am using version 1.9.3 in Virtualbox behind a corporate proxy.

[smira]

Looks like that document wasn't updated, the correct one is this one.

Also you can use registry mirrors/endpoint settings specifically for image pulls.

[michaelkebe]

Yeah, thanks for the hint 🙏 . It is working now 🎉 .
Maybe a little polish at the documentation is needed.

Didn't know that you can apply multiple YAML documents with talosctl apply-config.