Issue
Description of problem:
yum commands fail during entitled builds using ubi8 image.
~~~
Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms':
Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations:
CAfile: %(ca_cert_dir)sredhat-uep.pem
~~~
Version-Release number of selected component (if applicable):
How reproducible:
100%
Steps to Reproduce:
1. Run a build using ubi8 image and include some yum commands in the build process
2. During the build process, when yum commands are triggered, it fails with the following error:
~~~
Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms':
Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations:
CAfile: %(ca_cert_dir)sredhat-uep.pem
~~~
3. It seems like yum/dnf fails to get the value for the variable "%(ca_cert_dir)sredhat-uep.pem" from the RHSM config file.
Actual results:
Build fails with the error.
Expected results:
Since proper certificates are in place, builds should be successful.
Additional info:
Workaround:
1. Edit the rhsm.conf with following entry:
~~~
repo_ca_cert = /etc/rhsm/ca/redhat-uep.pem
~~~
2. Create a secret or CM & mount it to replace the default rhsm.conf file.