This will allow us to only need quay.io and not any other registries where we bake in CAs.
+1
Since this is done only once, why not fetch the cert in Dockerfile?
The point is that an extra cert is fetched at runtime (based on the CA_URL environment variable), rather than baked into the image.
:+1:
Since this is done only once, why not fetch the cert in Dockerfile? The point is that an extra cert is fetched at runtime (based on the CA_URL environment variable), rather than baked into the image.
OK, thanks, I knew that I missed something obvious.
Pull-Request has been merged by mprahl
This will allow us to only need quay.io and not any other registries where we bake in CAs.