InterDiode/id_configurator
1
0
Fork 0
mirror of https://github.com/d9pouces/id_configurator.git synced 2026-11-09 01:47:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: update config-url configuration with Test CA certificate and Dockerfile enhancements

Browse Source 
Signed-off-by: d9pouces <github@19pouces.net>
This commit is contained in:
d9pouces
2026-09-07 08:12:48 +02:00
parent 9de98d4744
commit ab2a179a55
2 changed files with 36 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/dockerfiles/ConfigUrl.Dockerfile
+8 -3
View File
@@ -8,7 +8,12 @@ RUN id-configurator apply \
--config-url-cacert-content "$CONFIG_URL_CACERT_CONTENT" \
--src /src --dst /dst
FROM target AS runtime
ARG CONFIG_REPO_PORT
RUN apt-get update && apt-get install -y --no-install-recommends curl
COPY --from=configuration /dst/ /
RUN grep -qx \
'test-only certificate fetched via --config-url by the id-configurator integration tests' \
/usr/local/share/ca-certificates/config-url-marker.crt
# Proves the root CA the downloaded configuration installed is actually
# trusted system-wide: no --insecure/--no-check-certificate here, unlike the
# --config-url-cacert-content fetch above (which trusts only that one CA to
# validate the download itself, before anything has been installed yet).
RUN curl -fsS "https://host.docker.internal:${CONFIG_REPO_PORT}/config.yaml" \
| grep -q 'organisation: InterDiode'