AAP2 Bootstrap script should add CA Cert info

[kenmoini]

If you're using self-signed certificates you'll need to log into the AAP2 Controler/Tower, navigate to Settings > Job Settings - then add one of the following to the Extra Environment Variables:

{
 "GIT_SSL_CAINFO": "/etc/custom-ca/bundle-ca.crt",
}

{
  "GIT_SSL_NO_VERIFY": "True"
}

Allow the ./bootstrap-aap2.sh script to add the GIT_SSL_NO_VERIFY key automatically with some API and jq magic - otherwise this is now documented in ./docs/aap2-setup.md

[kenmoini]

Looks like the AAP2 Controller CRD can take a .spec.bundle_cacert_secret definition for the CA bundle

[kenmoini]

Config info: https://docs.ansible.com/automation-controller/4.0.0/html_zh/administration/operator_advanced_configurations.html

[kenmoini]

Currently the fix is to set GIT_SSL_NO_VERIFY in the AAP2 Controller Job Settings via the API in hub configuration Ansible playbook ansible-playbook 2_configure.yaml