Skip to content

Add TLS certificates to Docker image #293

@smithclay

Description

@smithclay

Hello, the docker image published to ghcr.io/equinix-labs/otel-cli:latest is very helpful in running otel-cli in containerized/k8s environments. However, it has issues sending data to any TLS endpoints as certificates are not included the image. All TLS requests fail with the following:

2023/11/09 16:57:00 rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority"

Would it be possible to update the Dockerfile to use a base image with certificates installed?

Example of running the image in k8s where certificates are needed:

kubectl run otel-cli \
    --image=ghcr.io/equinix-labs/otel-cli:latest \
     --env "OTEL_EXPORTER_OTLP_ENDPOINT=ingest.lightstep.com:443" \
     --env 'OTEL_EXPORTER_OTLP_HEADERS="lightstep-access-token=..."' \
     --command -- ./otel-cli span --verbose -n testing -s k8s_span

Currently have a fork of the image being built here: https://github.com/lightstep/otel-cli-with-certs

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions