From 54554080eea5eba2f6301af19bfdb9b5fba4fc7c Mon Sep 17 00:00:00 2001
From: Ivan Bazulic <ibazulic@redhat.com>
Date: Tue, 15 Jul 2025 09:51:09 -0400
Subject: [PATCH] alembic: Install certs during alembic migrations
 (PROJQUAY-9135) (#4125)

Currently, we don't install certs when starting alembic migrations on the db. This poses a problem when Quay is behind a proxy and proxy HTTPS connection is needed to connect to the database. This small fix will make alembic migrations take into account certificates installed in `extra_ca_certs` folder.
---
 quay-entrypoint.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/quay-entrypoint.sh b/quay-entrypoint.sh
index 2740bf25a..7e5ec9ca8 100755
--- a/quay-entrypoint.sh
+++ b/quay-entrypoint.sh
@@ -78,6 +78,7 @@ case "$QUAYENTRY" in
         echo ""; echo "Startup timestamp: "; date; echo ""
         : "${MIGRATION_VERSION:=$2}"
         : "${MIGRATION_VERSION:?Missing version argument}"
+        "${QUAYPATH}/conf/init/certs_install.sh" || exit
         "${QUAYPATH}/conf/init/client_certs.sh" || exit
         echo "Entering migration mode to version: ${MIGRATION_VERSION}"
         PYTHONPATH="${QUAYPATH}" alembic upgrade "${MIGRATION_VERSION}"