feat: Mount CA bundle certificates into devworkspaces

[tolusha]

What does this PR do?

• merge all ConfigMaps with certificates into a single one
• add corresponding labels and annotation to mount into devworkspace
• the default mount path is /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem, which work only on rhel based images

Screenshot/screencast of this PR

N/A

What issues does this PR fix or reference?

https://issues.redhat.com/browse/CRW-6792

How to test this PR?

1. Prepare a patch file if needed:

cat > /tmp/cr-patch.yaml <<EOF
apiVersion: org.eclipse.che/v2
kind: CheCluster
spec: {}
EOF

2. Deploy the operator:

OpenShift

./build/scripts/olm/test-catalog-from-sources.sh --cr-patch-yaml /tmp/cr-patch.yaml

on Minikube

./build/scripts/minikube-tests/test-operator-from-sources.sh --cr-patch-yaml /tmp/cr-patch.yaml

3. Deploy Git Server
4. Import the Git server certificate following the doc https://eclipse.dev/che/docs/stable/administration-guide/importing-untrusted-tls-certificates/
5. Start a workspace from the Git Server
6. Check the project is cloned successfully

PR Checklist

As the author of this Pull Request I made sure that:

• The Eclipse Contributor Agreement is valid
• Code produced is complete
• Code builds without errors
• Tests are covering the bugfix
• Development resource are up to date
• The repository devfile is up to date and works
• Sections What issues does this PR fix or reference and How to test this PR completed
• Relevant user documentation updated
• Relevant contributing documentation updated
• CI/CD changes implemented, documented and communicated

Reviewers

Reviewers, please comment how you tested the PR when approving it.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[openshift-ci]

@tolusha: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/v14-che-behind-proxy	264a36d	link	true	/test v14-che-behind-proxy

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[tolusha]

/test v14-devworkspace-happy-path

[artaleks9]

Verified on Eclipse Che using the CRW-6792 branch with bitbucket-server and gitlab-server

The functionality works properly

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: artaleks9, tolusha

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[devstudio-release]

Build 3.18 :: operator_3.x/418: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7876: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7900: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: push-latest-container-to-quay_3.x/5005: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7909: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7909:

devspaces-operator-bundle : 3.x :: Failed in 65300913 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3703: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7881: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7918: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7918:

devspaces-operator-bundle : 3.x :: Failed in 65308701 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3704: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7883: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7922: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7922:

devspaces-operator-bundle : 3.x :: Failed in 65317446 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3705: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7884: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7923: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7923:

devspaces-operator-bundle : 3.x :: Failed in 65324114 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3706: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7885: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7924: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7924:

devspaces-operator-bundle : 3.x :: Failed in 65325665 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3707: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7886: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7926: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7926:

devspaces-operator-bundle : 3.x :: Failed in 65329862 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3708: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7887: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7929: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7929:

devspaces-operator-bundle : 3.x :: Failed in 65334666 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay

[devstudio-release]

Build 3.18 :: operator-bundle_3.x/3709: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: sync-to-downstream_3.x/7890: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7932: Console, Changes, Git Data

[devstudio-release]

Build 3.18 :: get-sources-rhpkg-container-build_3.x/7932:

devspaces-operator-bundle : 3.x :: Failed in 65346829 : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay