From bbda520294e926b2a8b6feb31d522803905dee06 Mon Sep 17 00:00:00 2001 From: Nail Islamov Date: Fri, 25 May 2018 22:40:02 +1000 Subject: [PATCH] Bring back root CA certificates to a Service Catalog Docker image --- build/service-catalog/Dockerfile | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/build/service-catalog/Dockerfile b/build/service-catalog/Dockerfile index aa31d466184..d3e5b253b6a 100644 --- a/build/service-catalog/Dockerfile +++ b/build/service-catalog/Dockerfile @@ -12,8 +12,20 @@ # See the License for the specific language governing permissions and # limitations under the License. +# Build a Debian-based image to copy root CA certificates from it +# to a scratch-based image using Docker multi-stage builds +FROM BASEIMAGE as base + +RUN export DEBIAN_FRONTEND=noninteractive && \ + apt-get update && \ + apt-get install ca-certificates -y && \ + rm -rf /var/lib/apt/lists/* + +# Build actual scratch-based Service Catalog image with root CA certificates FROM scratch +COPY --from=base /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ + ADD tmp /tmp ADD service-catalog opt/services/