Install certificates to worker that all containers could inherit from

Currently Concourse supports specify CAs in docker resource source configure to allow the resource container to access a private registry. It also provide a flag --certs-dir to allow cert propagation.

But that is not the case for task container. A work around is to have a step to modify the task image to include the custom certs before using it. The down side is one has to either prepare that image in a different job and upload it before using it; or the step has to be ran in each individual job.

If we could find a way in helm to append custom certs to worker's certificate directory, then there is no need to either configuring --certs-dir or modifying the task image beforehand. All containers of that worker will have certs inherit from worker itself.

Start by reviewing the Helm chart's worker configuration alongside the documented --certs-dir certificate propagation behavior and the worker certificate directory mentioned in the issue. Define how custom certificates supplied through Helm would reach task containers without modifying task images or configuring --certs-dir; completion should cover all containers on the worker.