kubernetes-client / kubernetes-client/python
Certifi overrides system CA config on RHEL/CentOS
Open
lifecycle/frozen
- Dominant language
- Python
- Stars
- 7.7k
- Forks
- 3.5k
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 18
Description
For RHEL/CentOS users using certifi like here https://github.com/kubernetes-client/python/blob/master/kubernetes/client/rest.py#L77 will forcefully override system provided CA configuration and reset it to the Mozilla CA pem. Missing any internal CA certs and thus failing with CERTIFICATE_VERIFY_FAILED errors.
See also: https://github.com/openshift/openshift-restclient-python/issues/198
Contributor guide
Assessment
This issue has not been assessed yet.