How argocd truststore works for helm?

[r-vorlicek]

Hello
I have 2 enviroments. On TEST environment truststore works OK but on PROD not.
Could you help me?

Certificates in /app/config/tls are mounted from configmap argocd-tls-certs-cm.

on TEST:

argocd@argocd-repo-server-dc486b745-c57jx:/tmp$ echo ""|openssl s_client -connect git.kube.ods.test:443 -showcerts 2>/dev/null| openssl verify -CAfile /app/config/tls/localroot-ca
stdin: OK

argocd@argocd-repo-server-dc486b745-c57jx:/tmp$ helm pull --repo https://git.kube.ods.test/api/packages/veolia/helm dagster --version 1.5.2 && echo OK
OK

on PROD:

argocd@argocd-repo-server-649997767b-zjnt2:/tmp$ echo ""|openssl s_client -connect git.kube.ods.prod:443 -showcerts 2>/dev/null| openssl verify -CAfile /app/config/tls/localroot-ca
stdin: OK

argocd@argocd-repo-server-649997767b-zjnt2:/tmp$ helm pull --repo https://git.kube.ods.prod/api/packages/veolia/helm dagster --version 1.5.2  && echo OK
Error: looks like "https://git.kube.ods.prod/api/packages/veolia/helm" is not a valid chart repository or cannot be reached: Get "https://git.kube.ods.prod/api/packages/veolia/helm/index.yaml": tls: failed to verify certificate: x509: certificate signed by unknown authority

argocd@argocd-repo-server-649997767b-zjnt2:/tmp$ helm pull --repo https://git.kube.ods.prod/api/packages/veolia/helm dagster --version 1.5.2 --ca-file /app/config/tls/localroot-ca && echo OK
OK

add1: argocd-repo-server does not contain env SSL_CERT_DIR. why?