Docker Container Plugin - NO MERGE YET

Adds a docker content plugin, monitoring for content of type "containerimage" in certificates and if found, copies that cert/key pair to /etc/docker/certs.d/ with filenames docker expects.

Certs should be kept in sync, if the entitlement is removed, the docker copy should go with it. This is implemented by looking for any other files that look like key/cert pairs and cleaning them up. i.e. we assume ownership of the cert pairs within this directory.

The hostname directory within certs.d is still unknown and will need to change. (currently redhat.com) We may also need to include a CA cert. These are the only outstanding changes I'm waiting to hear back on.


I'd add a comment that his assumes a cert file that already exists at /etc/docker/certs.d/redhat.com/123456789.cert is the same cert as /etc/pki/entitlements/123456789.pem. Totally valid assumption given serial numbers for file names but worth a note.