Enable ssl in node agents (#1089)

opendevstack · Jan 20, 2025 · 1b506d7 · 1b506d7
1 parent e7d19d6
commit 1b506d7
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 ## Unreleased
 
+- Nodejs agents should make use of the installed certificates in the agent ([#1078](https://github.com/opendevstack/ods-quickstarters/issues/1078))
 - Fix Ruby installation with high amount of CPU cores ([#1084](https://github.com/opendevstack/ods-quickstarters/issues/1084))
 - Update OS packages by default and bump gitleaks version ([#1049](https://github.com/opendevstack/ods-quickstarters/issues/1049))
 - Install java 17 devel only in scala and jdk agents ([#1057](https://github.com/opendevstack/ods-quickstarters/pull/1057))

diff --git a/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8
@@ -15,6 +15,7 @@ ARG nexusAuth
 ENV NODEJS_VERSION=18 \
     YARN_VERSION=1.22.18 \
     NPM_CONFIG_PREFIX=$HOME/.npm-global \
+    NPM_CONFIG_CAFILE=/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem \
     PATH=$HOME/.yarn/bin:$HOME/.config/yarn/global/node_modules/.bin:$HOME/node_modules/.bin/:$HOME/.npm-global/bin/:$PATH \
     LANG=en_US.UTF-8 \
     LC_ALL=en_US.UTF-8
@@ -49,8 +50,7 @@ RUN yum repolist \
 RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     npm config set //${nexusUrl#*://}/repository/npmjs/:_auth=$(echo -n $nexusAuth | base64) && \
     npm config set [email protected] && \
-    npm config set ca=null && \
-    npm config set strict-ssl=false && \
+    npm config set strict-ssl=true && \
     yarn config set registry $nexusUrl/repository/npmjs/ -g && \
     echo node version: $(node --version) && \
     echo npm version: $(npm --version) && \

diff --git a/common/jenkins-agents/nodejs20/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs20/docker/Dockerfile.ubi8
@@ -15,6 +15,7 @@ ARG nexusAuth
 ENV NODEJS_VERSION=20 \
     YARN_VERSION=1.22.19 \
     NPM_CONFIG_PREFIX=$HOME/.npm-global \
+    NPM_CONFIG_CAFILE=/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem \
     PATH=$HOME/.yarn/bin:$HOME/.config/yarn/global/node_modules/.bin:$HOME/node_modules/.bin/:$HOME/.npm-global/bin/:$PATH \
     LANG=en_US.UTF-8 \
     LC_ALL=en_US.UTF-8
@@ -49,8 +50,7 @@ RUN yum repolist \
 RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     npm config set //${nexusUrl#*://}/repository/npmjs/:_auth=$(echo -n $nexusAuth | base64) && \
     npm config set [email protected] && \
-    npm config set ca=null && \
-    npm config set strict-ssl=false && \
+    npm config set strict-ssl=true && \
     yarn config set registry $nexusUrl/repository/npmjs/ -g && \
     echo node version: $(node --version) && \
     echo npm version: $(npm --version) && \

diff --git a/common/jenkins-agents/nodejs22/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs22/docker/Dockerfile.ubi8
@@ -15,6 +15,7 @@ ARG nexusAuth
 ENV NODEJS_VERSION=22 \
     YARN_VERSION=1.22.19 \
     NPM_CONFIG_PREFIX=$HOME/.npm-global \
+    NPM_CONFIG_CAFILE=/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem \
     PATH=$HOME/.yarn/bin:$HOME/.config/yarn/global/node_modules/.bin:$HOME/node_modules/.bin/:$HOME/.npm-global/bin/:$PATH \
     LANG=en_US.UTF-8 \
     LC_ALL=en_US.UTF-8
@@ -49,8 +50,7 @@ RUN yum repolist \
 RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     npm config set //${nexusUrl#*://}/repository/npmjs/:_auth=$(echo -n $nexusAuth | base64) && \
     npm config set [email protected] && \
-    npm config set ca=null && \
-    npm config set strict-ssl=false && \
+    npm config set strict-ssl=true && \
     yarn config set registry $nexusUrl/repository/npmjs/ -g && \
     echo node version: $(node --version) && \
     echo npm version: $(npm --version) && \