certgraphanalysis: include ondisk certs in ElideProxyCADetails

openshift · Jun 11, 2024 · d98911a · d98911a
1 parent d2c7ae1
commit d98911a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pkg/certs/cert-inspection/certgraphanalysis/metadata_options.go b/pkg/certs/cert-inspection/certgraphanalysis/metadata_options.go
@@ -93,6 +93,13 @@ var (
 				isProxyCA = true
 			}
 
+			for _, loc := range caBundle.Spec.OnDiskLocations {
+				if strings.Contains(loc.Path, "/trusted-ca-bundle/") || strings.Contains(loc.Path, "/etc/pki/tls") {
+					isProxyCA = true
+					continue
+				}
+			}
+
 			if !isProxyCA {
 				return
 			}