I run a private aks, this cluster runs services that also connect to other services within the wider company network. In our company we have an internally self-signed root certificate. And there is a service under the domain example.company.internal that we need to access. The certificate for example.company.internal is signed by our self-singed root certificate.

From all the windows PCs this is no problem because some policy adds the root-cert to the windows trusted cert store.

However, from within the cluster, if I run curl https://example.company.internal/ I get the following output

curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

I so far could not find a way to let the whole cluster trust this self-signed certificate.
Any guidance would be appreciated.