Support HTTPS proxy with self-signed (or private) CA #2633
Open
Description
Component: salt, containerd
Why this is needed:
Some users may want to run MetalK8s behind a private proxy, using HTTPS with a certificate not signed by a publicly trusted CA. Today, we cannot configure this CA bundle in BootstrapConfiguration.
What should be done: Add an option to pass this bundle for trusting the proxy certificate, and document it properly.
Test plan: Run our CI deployments behind such a proxy! (Should already be the case... for HTTP at least)