Skip to content

Commit c7a2e10

Browse files
authored
fix(build): include CA certificates in Docker image (#483)
Ensure the image contains trusted CA certificates so the app can establish secure HTTPS connections to AWS services. Without them, TLS handshakes fail with **x509: certificate signed by unknown authority**: `failed to check if infra exists: operation error SQS: GetQueueUrl, exceeded maximum number of attempts, 3, https response error StatusCode: 0, RequestID: , request send failed, Post "https://sqs.eu-west-1.amazonaws.com/": tls: failed to verify certificate: x509: certificate signed by unknown authority`
1 parent 21c15bf commit c7a2e10

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

build/Dockerfile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ RUN go build -o ./bin/outpost ./cmd/outpost/main.go && \
1212
# Stage 1
1313
# Copy binaries to a new image
1414
FROM scratch
15+
COPY --from=0 /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
1516
COPY --from=0 /app/bin/outpost /bin/outpost
1617
COPY --from=0 /app/bin/outpost-server /bin/outpost-server
1718
COPY --from=0 /app/bin/outpost-migrate-redis /bin/outpost-migrate-redis

0 commit comments

Comments
 (0)