Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vault-enterprise:1.17.6 docker image does not contain ca-certificates apk package #28789

Open
conman2305 opened this issue Oct 28, 2024 · 1 comment
Labels
docker regression Used to indicate possible regressions between versions

Comments

@conman2305
Copy link

Is your feature request related to a problem? Please describe.
We recently upgraded from the hashicorp/vault-enterprise:1.15.6 docker image to hashicorp/vault-enterprise:1.17.6 and along with the upgrade to Alpine 3.20, it looks like the ca-certificates package is no longer installed.

We call update-ca-certificates as an extra init container in our Helm chart to load internal CA certs into the trusted CA bundle for the main application container as a shared volume mount

Describe the solution you'd like
Install the ca-certificates package as part of the vault image.

Describe alternatives you've considered
We reverted back to the 1.15.6 image as the source init container for building the trusted cert bundle for now, but it would be nice to keep the init container we use to build the trusted cert bundle the same version as the main application container

@dukhat2259
Copy link

FWIW, I wrestled with this yesterday and I caved in with

services:
  vault:
    volumes:
      - /etc/ssl/cert.pem:/etc/ssl/cert.pem:ro

@mpalmi mpalmi added docker regression Used to indicate possible regressions between versions labels Oct 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docker regression Used to indicate possible regressions between versions
Projects
None yet
Development

No branches or pull requests

3 participants