WIP: Use the service CA

Is it supposed to work like that? Per https://github.com/openshift/openshift-docs/blob/enterprise-4.1/release_notes/ocp-4-1-release-notes.adoc#service-ca-bundle-changes
the path is deprecated.

Signed-off-by: Miloslav Trmač <[email protected]>

Author: mtrmac

test/extended/images/signatures.go

@@ -100,8 +100,11 @@ var _ = g.Describe("[sig-imageregistry][Serial][Suite:openshift/registry/serial]
 
 			"copy", "--sign-by", "[email protected]",
 			"--dest-creds=" + user + ":" + token,
-			// TODO: test with this turned to true as well
-			"--dest-tls-verify=false",
+
+			// Expect to use /run/secrets/kubernetes.io/serviceaccount/ca.crt
+			"--src-cert-dir=/run/secrets/kubernetes.io/serviceaccount",
+			"--dest-cert-dir=/run/secrets/kubernetes.io/serviceaccount",
+
 			"docker://" + image.ShellImage(),
 			"docker://" + signedImage,
 		}, " "))