[Typescript BUN]: Getting SSL certificate error even though I have added the CA as volume mount.
Logged into the container and saw that the certificate is getting added to the truststore and when running curl commands it is working.
But when executing the script from Windmill it is failing.
Below is the docker-compose.yml
windmill_worker:
image: ${WM_IMAGE}
pull_policy: always
deploy:
replicas: 3
resources:
limits:
cpus: "1"
memory: 2048M
# for GB, use syntax '2Gi'
restart: unless-stopped
environment:
- DATABASE_URL=${DATABASE_URL}
- MODE=worker
- WORKER_GROUP=default
- INIT_SCRIPT=update-ca-certificates
- DENO_TLS_CA_STORE=system,mozilla
- DENO_CERT=/usr/local/share/ca-certificates/api-cerebro-prod-cernerasp-com.crt
depends_on:
db:
condition: service_healthy
# to mount the worker folder to debug, KEEP_JOB_DIR=true and mount /tmp/windmill
volumes:
# mount the docker socket to allow to run docker containers from within the workers
- /var/run/docker.sock:/var/run/docker.sock
- worker_dependency_cache:/tmp/windmill/cache
- worker_logs:/tmp/windmill/logs
- /var/windmill/compose/certs:/usr/local/share/ca-certificates:ro
logging: *default-logging
But when executing the script from Windmill it is failing.
Below is the docker-compose.yml
windmill_worker:
image: ${WM_IMAGE}
pull_policy: always
deploy:
replicas: 3
resources:
limits:
cpus: "1"
memory: 2048M
# for GB, use syntax '2Gi'
restart: unless-stopped
environment:
- DATABASE_URL=${DATABASE_URL}
- MODE=worker
- WORKER_GROUP=default
- INIT_SCRIPT=update-ca-certificates
- DENO_TLS_CA_STORE=system,mozilla
- DENO_CERT=/usr/local/share/ca-certificates/api-cerebro-prod-cernerasp-com.crt
depends_on:
db:
condition: service_healthy
# to mount the worker folder to debug, KEEP_JOB_DIR=true and mount /tmp/windmill
volumes:
# mount the docker socket to allow to run docker containers from within the workers
- /var/run/docker.sock:/var/run/docker.sock
- worker_dependency_cache:/tmp/windmill/cache
- worker_logs:/tmp/windmill/logs
- /var/windmill/compose/certs:/usr/local/share/ca-certificates:ro
logging: *default-logging
