[wgo-web] ipa-ca.crt also has to land

[Andrea Veri <averi src gnome org>]

commit f206fb7a0f4955a1d4bf920331d8ea957317d813
Author: Andrea Veri <averi redhat com>
Date:   Tue Aug 27 13:23:01 2019 +0200

    ipa-ca.crt also has to land

 Dockerfile                       |  4 +++-
 ipa-ca.crt                       | 21 +++++++++++++++++++++
 resources/members-list-cron.yaml |  2 ++
 3 files changed, 26 insertions(+), 1 deletion(-)
---
diff --git a/Dockerfile b/Dockerfile
index 1f759a5..d6b2bed 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,8 +9,10 @@ RUN rpm -Uvh --nodeps $(repoquery --location mod_geoip) && \
 
 COPY git-pull.sh /usr/local/bin/git-pull.sh
 COPY civicrm-cron.sh /usr/local/bin/civicrm-cron.sh 
+COPY ipa-ca.crt /etc/ipa/ca.crt
 
-RUN mkdir -p /srv/http/www.gnome.org \
+RUN mkdir -p /srv/http/www.gnome.org; \
+    mkdir /etc/ipa; \
     mkdir -p /home/admin/bin
 COPY 00_www.gnome.org.conf /etc/httpd/conf.d
 
diff --git a/ipa-ca.crt b/ipa-ca.crt
new file mode 100644
index 0000000..9f14f84
--- /dev/null
+++ b/ipa-ca.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADA0MRIwEAYDVQQKEwlHTk9N
+RS5PUkcxHjAcBgNVBAMTFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0xNDA5MjQw
+NzI4MzNaFw0zNDA5MjQwNzI4MzNaMDQxEjAQBgNVBAoTCUdOT01FLk9SRzEeMBwG
+A1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOC
+AQ8AMIIBCgKCAQEAu9W/LNqT9MHDD1Mu3xcwZok6yLUAKhEYTmgu4pjDTvzSbi1m
+glrHPS6b6sfIzCZpz9DQCm21kkmQ74S0WUCeujlTXzW1Pahw7B5bASIdmHVYvYkd
+KYsMS+Q4k7LqSmbSXyoh5KTaFS0w7Sb/E+2ssj8typQrO5OqKhhDpATY5FMggidl
+zlzCf8hKxzggGOPxhvjK7xM2wsDyRyL80prdEKoHTHM40WFoxcre0agCqoJt85KC
+FeYJ/F26JsI+kld31qPDQaKVYWFHofX9w0bBFqb66C0tL1dzNguBxtUQuV/OqsYS
+2YojzpapAItYQG/0wiTYwzvXsXzwz5OtgxHkpwIDAQABo4GlMIGiMB8GA1UdIwQY
+MBaAFDysL920rmecAPeU784ehmMMelzQMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
+AQH/BAQDAgHGMB0GA1UdDgQWBBQ8rC/dtK5nnAD3lO/OHoZjDHpc0DA/BggrBgEF
+BQcBAQQzMDEwLwYIKwYBBQUHMAGGI2h0dHA6Ly9hY2NvdW50Lmdub21lLm9yZzo4
+MC9jYS9vY3NwMA0GCSqGSIb3DQEBCwUAA4IBAQAY7JPDJyiFUoNHbbecufP0kH6F
+YASOH0xIsHdF9XkKYqloDSfrznoUC11fmgolcMVuDNQVb9OsjgitY49vfF+1gKGp
+hJB7Ok3qdA67VaYtYKG0nmBLgVAK0honEf9d6S28f1kg/2giGI+OIVS+XrMm3fXk
+BstScZnj5AkRb+eaqcPmocbg41BAFUKh046MuFlFl/ynYDHYGCJPJ0jZLYbjF1Kx
+hcH+hOTGHlE4Uu07gHjIp/zxmAW83fYqUciB+Qn/1kuNuvWR39rbfNsJutPLFul7
+QJhd9UqlnvXRnFbsMtzQTv8MeShWuFY51y2S16Hb5Cu6C53v6vUToOm0wmUm
+-----END CERTIFICATE-----
diff --git a/resources/members-list-cron.yaml b/resources/members-list-cron.yaml
index 086e8f0..732a36a 100644
--- a/resources/members-list-cron.yaml
+++ b/resources/members-list-cron.yaml
@@ -30,6 +30,8 @@ spec:
               value: 'cn=users,cn=accounts,dc=gnome,dc=org'
             - name: LDAP_GROUP_BASE
               value: 'cn=groups,cn=accounts,dc=gnome,dc=org'
+            - name: LDAP_CA_PATH
+              value: '/etc/ipa/ca.crt'
             - name: LDAP_PASSWORD
               valueFrom:
                 secretKeyRef: