From 2ff7a6556ad846c1b073d8a4b2f2be105c9a951d Mon Sep 17 00:00:00 2001
From: Matt Rickard <m@rickard.email>
Date: Sun, 15 Apr 2018 13:40:17 -0700
Subject: [PATCH] dockerfile: add custom ssl certs dir (#88)

The certs should be added to the whitelisted kaniko directory so that
an image build does not override them and possibly affect the push to
the registry.
---
 deploy/Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/deploy/Dockerfile b/deploy/Dockerfile
index 37b07e01d..a1b920c5d 100644
--- a/deploy/Dockerfile
+++ b/deploy/Dockerfile
@@ -16,10 +16,11 @@
 
 FROM scratch
 ADD out/executor /kaniko/executor
-ADD files/ca-certificates.crt /etc/ssl/certs/
+ADD files/ca-certificates.crt /kaniko/ssl/certs/
 ADD files/docker-credential-gcr /usr/local/bin/
 ADD files/config.json /root/.docker/
 RUN ["docker-credential-gcr", "config", "--token-source=env"]
 ENV HOME /root
 ENV PATH /usr/local/bin
+ENV SSL_CERT_DIR=/kaniko/ssl/certs
 ENTRYPOINT ["/kaniko/executor"]