UBI 9 image needs DoD PKI certificate bundle update to v5.13
Feature description
The current v5.11 certificate bundle does not contain the DOD SW CA 74.
The updated v5.13 bundle (dated Nov 3, 2023) does have this: https://public.cyber.mil/unclass-certificates_pkcs7_dod/
https://dl.dod.cyber.mil/wp-content/uploads/pki-pke/zip/unclass-certificates_pkcs7_DoD.zip
Use cases
Deploying downstream images based on ubi9 in environments where updated DoD bundles are needed.
Benefits
Any image based on ubi9 deployed in an environment without this bundle will have issues accessing dod resources.
Requirements
n/a
Links / references
n/a
Tasks
-
Feature has been implemented
Please read the Iron Bank Documentation for more info