Certificate improvements

deployment/docker_compose/docker-compose.dev.yml

@@ -221,6 +221,10 @@ services:
         max-size: "50m"
         max-file: "6"
     # Uncomment the following lines if you need to include a custom CA certificate
+    # This section enables the use of a custom CA certificate
+    # If present, the custom CA certificate is mounted as a volume
+    # The container checks for its existence and updates the system's CA certificates
+    # This allows for secure communication with services using custom SSL certificates
     # Optional volume mount for CA certificate
     # volumes:
     #   # Maps to the CA_CERT_PATH environment variable in the Dockerfile

deployment/docker_compose/docker-compose.prod.yml

@@ -65,6 +65,10 @@ services:
         max-size: "50m"
         max-file: "6"
     # Uncomment the following lines if you need to include a custom CA certificate
+    # This section enables the use of a custom CA certificate
+    # If present, the custom CA certificate is mounted as a volume
+    # The container checks for its existence and updates the system's CA certificates
+    # This allows for secure communication with services using custom SSL certificates
     # volumes:
     #   # Maps to the CA_CERT_PATH environment variable in the Dockerfile
     #   - ${CA_CERT_PATH:-./custom-ca.crt}:/etc/ssl/certs/custom-ca.crt:ro

deployment/kubernetes/background-deployment.yaml

@@ -17,11 +17,13 @@ spec:
           image: danswer/danswer-backend:latest
           imagePullPolicy: IfNotPresent
           command:
-            [
-              "/usr/bin/supervisord",
-              "-c",
-              "/etc/supervisor/conf.d/supervisord.conf",
-            ]
+            - "/bin/sh"
+            - "-c"
+            - |
+              if [ -f /etc/ssl/certs/custom-ca.crt ]; then
+                update-ca-certificates;
+              fi &&
+              /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
           env:
             - name: REDIS_PASSWORD
               valueFrom:
@@ -32,6 +34,10 @@ spec:
             - configMapRef:
                 name: env-configmap
       # Uncomment the following lines if you need to include a custom CA certificate
+      # This section allows for the inclusion of a custom CA certificate
+      # If a custom CA certificate is present, it updates the system's CA certificates
+      # This is useful for environments with self-signed or internal CA certificates
+      # The certificate is mounted as a volume and the container checks for its presence
       # Optional volume mount for CA certificate
       #   volumeMounts:
       #     - name: my-ca-cert-volume