I am trying to attach ca-certificates (pem files) to the docker image produced by spring-boot gradle plugin(buildpacks). The command I am using is ./gradlew bootBuildImage. This is working fine locally and is adding the certificates but when I run this from my gitlab pipeline I am getting the below errors:
I added some logging to the pipeline and it seems that even though the files (pem & type) are present and have the appropriate permissions, the pipeline runner is probably not having access to those, hence it fails. I dont see how I can add the files differently or execute a command in the builder to get them via wget/curl..
Here is my build.gradle configuration:
and the pem files are stored like this:
The error is not very helpful and documentation is not very great. Any idea is welcome.
I have added
environment = [
"BP_LOG_LEVEL": "debug"
]
and the /platform related sections (aside from the originally shared log) are here(mentioned a few times) :
EDIT: The certificates I am trying to add are AWS RDS ones. I did try changing the buildpacks builder image in an attempt to use a more appropriate (adoptium) one (containing the AWS root certificate) https://bugs.openjdk.org/browse/JDK-8233223 but with no luck.
I get the impression that it is a gitlab issue and have started exploring passing the pem files to the EKS pod differently.. maybe via SERVICE_BINDING_ROOT and k8s secrets.