fix(docker): avoid installing curl for the RDS certificates (#480)

getoutreach · Apr 11, 2024 · 9b5e60a · 9b5e60a
1 parent 4b01a40
commit 9b5e60a
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 10 deletions.
diff --git a/...mentDockerfile-deployments-appname-Dockerfile.tpl-deployments-testing-Dockerfile.snapshot b/...mentDockerfile-deployments-appname-Dockerfile.tpl-deployments-testing-Dockerfile.snapshot
@@ -33,11 +33,9 @@ COPY --from=builder /usr/local/go/lib/time/zoneinfo.zip /zoneinfo.zip
 ENV ZONEINFO=/zoneinfo.zip
 
 # Install certificates for RDS connectivity.
-RUN apk add --no-cache curl \
-    && curl "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" \
-      --output /usr/local/share/ca-certificates/global-bundle.pem \
-    && update-ca-certificates \
-    && apk del --no-cache curl
+RUN wget --output-document /usr/local/share/ca-certificates/global-bundle.pem \
+  "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" \
+  && update-ca-certificates
 
 ## <<Stencil::Block(afterBuild)>>
 

diff --git a/templates/deployments/appname/Dockerfile.tpl b/templates/deployments/appname/Dockerfile.tpl
@@ -36,11 +36,9 @@ COPY --from=builder /usr/local/go/lib/time/zoneinfo.zip /zoneinfo.zip
 ENV ZONEINFO=/zoneinfo.zip
 
 # Install certificates for RDS connectivity.
-RUN apk add --no-cache curl \
-    && curl "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" \
-      --output /usr/local/share/ca-certificates/global-bundle.pem \
-    && update-ca-certificates \
-    && apk del --no-cache curl
+RUN wget --output-document /usr/local/share/ca-certificates/global-bundle.pem \
+  "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" \
+  && update-ca-certificates
 
 ## <<Stencil::Block(afterBuild)>>
 {{ file.Block "afterBuild" }}