Impl (#10)

Author: KevinBoyerAtNava

app/Dockerfile

@@ -59,7 +59,7 @@ COPY . /app
 # https://stackoverflow.com/questions/27068163/python-requests-not-handling-missing-intermediate-certificate-only-from-one-mach
 # Append certificate to .../site-packages/certifi/cacert.pem
 RUN CERTIFI_CACERT_FILE=$(poetry run python -c "import certifi; print(certifi.where())") \
-    && [ -f "$CERTIFI_CACERT_FILE" ] && cat certs/aws_ca_intermediate_cert certs/local_dev_only_selfsigned_ca_root_cert >> $CERTIFI_CACERT_FILE
+    && [ -f "$CERTIFI_CACERT_FILE" ] && cat certs/local_dev_only_selfsigned_ca_root_cert >> $CERTIFI_CACERT_FILE
 
 ENV HAYHOOKS_PIPELINES_DIR=/app/src/pipelines
 
@@ -118,10 +118,6 @@ ENV PATH="/app/.venv/bin:$PATH"
 # to the Docker container that it's running in.
 ENV HOST=0.0.0.0
 
-# Append certificate to .../site-packages/certifi/cacert.pem
-RUN CERTIFI_CACERT_FILE=$(poetry run python -c "import certifi; print(certifi.where())") \
-    && [ -f "$CERTIFI_CACERT_FILE" ] && cat certs/aws_ca_intermediate_cert >> $CERTIFI_CACERT_FILE
-
 USER ${RUN_USER}
 
 # Run the application.

app/README.md

@@ -10,6 +10,7 @@ Based on [this documentation](https://arize.com/docs/phoenix/release-notes/04.20
       - Request certificate in ACM
       - Created CNAME record based on request result for ACM to validate request
       - Upon ACM validation, exported certificate from ACM; download and move to a `certs` folder
+      - Append the contents of `certificate_chain.txt` to the end of `certificate.pem`
       - Copy `certs` folder to Lightsail instance: `scp -i $SSH_KEY_PEM_FILE -r certs ec2-user@${STATIC_IP}`
    * (For local dev environment) Create self-signed certificate for Phoenix instance
 ```sh

app/certs/aws_ca_intermediate_cert

@@ -27,9 +27,9 @@ openai = "^1.99.8"
 openinference-instrumentation-haystack = "^0.1.24"
 arize-phoenix-client = "^1.15.3"
 arize-phoenix-otel = "^0.13.0"
-certifi = "^2025.8.3"
 
 [tool.poetry.group.dev.dependencies]
+certifi = "^2025.8.3"
 black = "^23.9.1"
 isort = "^5.12.0"
 mypy = "^1.5.1"