adding ca.crt to pod (minio access)

apps/web/nextcloud/Dockerfile

@@ -4,4 +4,5 @@ FROM nextcloud:stable-apache
 RUN sed -i '/\[CURLOPT_HEADERFUNCTION\].*$/a $conf[CURLOPT_SSL_VERIFYPEER] = false;' /usr/src/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php; \
 	cat /usr/src/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php; \
 	touch /usr/src/nextcloud/data/.ocdata
-COPY config.php /usr/src/nextcloud/config/
+COPY config.php /usr/src/nextcloud/config/
+COPY post-start.sh /usr/local/bin/post-start.sh

apps/web/nextcloud/deployment.yaml

@@ -24,6 +24,10 @@ spec:
       containers:
         - name: nextcloud
           image: cr.lan/nextcloud
+          livecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "/usr/local/bin/post-start.sh"]
           env:
             - name: TZ
               value: "Europe/Berlin"

apps/web/nextcloud/post-start.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+ln -s /var/run/secrets/kubernetes.io/serviceaccount/ca.crt /usr/local/share/ca-certificates/
+/usr/sbin/update-ca-certificates