Configuring Windmill to Trust Internal/Corporate CAs
TL;DR Mount CA Certificates in Windmill Ensure CA certificate is base64 encoded and has .crt extension. Create a directory for CA certificates. Modify docker-compose.yml to mount this directory to /usr/local/share/ca-certificates in read-only mode. Use INIT_SCRIPT environment variable to run update-ca-certificates in worker containers. Establish Deno’s Trust Set environment variable DENO_TLS_CA_STORE=system,mozilla in docker-compose.yml for Windmill workers. Configure Python (requests) Trust Set REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt in the worker’s environment variables. Add WHITELIST_ENVS=REQUESTS_CA_BUNDLE to explicitly allow this variable in Windmill workers....