Skip to content

Commit b489566

Browse files
committed
eliminate cert injection
1 parent 9d40214 commit b489566

4 files changed

Lines changed: 0 additions & 33 deletions

File tree

Dockerfile

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -8,17 +8,6 @@ FROM ${ECR_REGISTRY}/mysql-ruby-lambda
88
ENV RACK_CONFIG=app/config_mrt.ru
99
ENV TZ=America/Los_Angeles
1010

11-
# ui logic that is working
12-
# RUN mkdir /usr/local/share/ca-certificates/extra
13-
# COPY docker/ldap-ca.crt /usr/local/share/ca-certificates/extra/ldap-ca.crt
14-
# RUN /usr/sbin/update-ca-certificates
15-
16-
# copy default ca cert for opendj
17-
COPY docker/ldap-ca.crt /etc/pki/ca-trust/source/anchors/ldap-ca.crt
18-
# copy uc3 self-signed ca cert for use with EC2 ldap
19-
COPY UC3-Self-Signed-CA.crt /etc/pki/ca-trust/source/anchors/UC3-Self-Signed-CA.crt
20-
RUN /usr/bin/update-ca-trust extract
21-
2211
RUN dnf -y update && \
2312
dnf -y install gcc-c++ make tar patch libyaml-devel && \
2413
dnf clean all

UC3-Self-Signed-CA.crt

Lines changed: 0 additions & 1 deletion
This file was deleted.

buildspec.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,9 +42,6 @@ phases:
4242
on-failure: CONTINUE
4343
commands:
4444
- |
45-
CA_CERT_NAME=UC3-Self-Signed-CA.crt
46-
aws ssm get-parameter --name /uc3/default/uc3_ca/$CA_CERT_NAME --output text --query 'Parameter.Value' > $CA_CERT_NAME
47-
4845
docker build --quiet --push \
4946
--build-arg ECR_REGISTRY=${ECR_REGISTRY} \
5047
-t ${ECR_REGISTRY}/${REPONAME}:${BRANCHTAG} .

docker/ldap-ca.crt

Lines changed: 0 additions & 18 deletions
This file was deleted.

0 commit comments

Comments
 (0)