Support custom SSL CA certificate for glab release

Summary

relase-cli supports the ADDITIONAL_CA_CERT_BUNDLE variable to set custom CA certificates for SSL verification. However, this functionality is not currently available in the release keyword using glab.

release:
  variables:
    ADDITIONAL_CA_CERT_BUNDLE: |
        -----BEGIN CERTIFICATE-----
        MIIGqTCCBJGgAwIBAgIQI7AVxxVwg2kch4d56XNdDjANBgkqhkiG9w0BAQsFADCB
        ...
        jWgmPqF3vUbZE0EyScetPJquRFRKIesyJuBFMAs=
        -----END CERTIFICATE-----
  script:
    - echo "Create release"
  release:
    name: 'My awesome release'
    tag_name: '$CI_COMMIT_TAG'

Proposal

Check if $ADDITIONAL_CA_CERT_BUNDLE exists.
Then:

echo $ADDITIONAL_CA_CERT_BUNDLE > ca_cert_for_releasing_with_glab.pem
glab config set ca_cert ca_cert_for_releasing_with_glab.pem --host $CI_SERVER_FQDN

before the other commands

Questions

Is the CWD always writeable?

Edited May 15, 2025 by Furkan Ayhan
Assignee Loading
Time tracking Loading