feat: allow trusting additional certificates at run time

Change to base image meant that any custom certs need to be copied into `/etc/ssl/certs/` before running `update-ca-certificates` Signed-off-by: Daniel.Hill <daniel.hill@engineering.digital.dwp.gov.uk>
dwp · Aug 3, 2022 · ad3329e · ad3329e
1 parent cc359c4
commit ad3329e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/entrypoint.sh b/entrypoint.sh
@@ -1,6 +1,9 @@
 #!/usr/bin/env bash
 
-update-ca-certificates || true
+if [ -n "$CUSTOM_CA_DIR" ]; then
+  cp ${CUSTOM_CA_DIR}/* /etc/ssl/certs/
+  update-ca-certificates
+fi
 
 # This ensures that kitchen errors are maintained when piped through sed
 set -o pipefail