Fix step-ca root CA access on Linux CI

Host chmod cannot open 0700 dirs owned by UID 1000, so
`-f` never sees root_ca.crt. Chmod from inside the
container as root while waiting for the cert.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/server/api/complianceportal/session_test.go

@@ -49,6 +49,7 @@ func TestSessionHostMiddleware_RejectsMismatchedHost(t *testing.T) {
 	handler := NewSessionHostMiddleware(securecookie.Config{Name: "ssid"})(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			authenticated = authn.IdentityFromContext(r.Context()) != nil
+
 			w.WriteHeader(http.StatusOK)
 		}),
 	)
@@ -80,6 +81,7 @@ func TestSessionHostMiddleware_AllowsMatchingTLSHost(t *testing.T) {
 	handler := NewSessionHostMiddleware(securecookie.Config{Name: "ssid"})(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			authenticated = authn.IdentityFromContext(r.Context()) != nil
+
 			w.WriteHeader(http.StatusOK)
 		}),
 	)
@@ -111,6 +113,7 @@ func TestSessionHostMiddleware_RejectsSpoofedHostHeader(t *testing.T) {
 	handler := NewSessionHostMiddleware(securecookie.Config{Name: "ssid"})(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			authenticated = authn.IdentityFromContext(r.Context()) != nil
+
 			w.WriteHeader(http.StatusOK)
 		}),
 	)