I am trying to setup Juju for local development using the localhost cloud and I am behind an HTTPS SSL bump proxy. Because of the SSL bump I have to add the proxy’s HTTPS certificate to the system certificate authority, but I haven’t found a way to automatically do that when bootstrapping a Juju controller or when adding a new Juju machine to the localhost cloud.
Currently my workflow is to run a
juju bootstrap with the the
--model-default http-proxy flags and then, while Juju is running the configuration script on the new LXC container that it creates for the Juju controller, I use
lxc file push and
lxc exec to copy my certificate into the container and run
update-ca-certifcates. After I do that, the configuration script can successfully finish downloading what it needs to bootstrap the controller.
I’m going to test it, but I’m assuming I’m going to have to add the certificate authority manually for every other machine that the controller creates as well.
Does anybody know of a way to automate this? Even if I could specify my own custom script that Juju would run before it runs its own configuration scripts that would work.