4

I need to add self-signed certificates to a spring-boot docker image using spring-boot:build-image and paketo-buildpacks/ca-certificates but couldn't get it working.

So:

  • where to put the certificates to add?
  • in which format?
  • how to define paketo-buildpacks/ca-certificates bindings?
  • should any additional argument be provided to mvn spring-boot:build-image?

What I tried with no success so far: update pom.xml spring-boot-maven-plugin:

    <plugin>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-maven-plugin</artifactId>
        <configuration>
            <image>
                <bindings>
                    <binding>${basedir}/bindings/ca-certificates:/platform/bindings/ca-certificates</binding>
                </bindings>
            </image>
        </configuration>
        <executions>
            <execution>
                <goals>
                    <goal>build-image</goal>
                </goals>
            </execution>
        </executions>
    </plugin>

from ${basedir} folder:

mkdir bindings
mkdir bindings/ca-certificates
echo "ca-certificates" > bindings/ca-certificates/type
cp ~/.ssh/mycert.pem bindings/ca-certificates/
mvn spring-boot:build-image

Edit: moved image bindings configuration directly under boot-plugin (rather than inside a specific execution) as suggested by @nick-valanos and solved the problem.

ch4mp
  • 6,622
  • 6
  • 29
  • 49

2 Answers2

7

I got it. Maven configuration above is for maven package target, not spring-boot:build-image.

Here is the complete procedure:

  • create bindings/ca-certificates folder at maven project root and add to it:
    • type file containing just ca-certificates
    • CA certificatates you want to be embedded (in PEM format)
  • in pom.xml, add a build-image execution to spring-boot-maven-plugin with ${basedir}/bindings/ca-certificates:/platform/bindings/ca-certificates image binding as configured in my question
  • run mvn clean package
ch4mp
  • 6,622
  • 6
  • 29
  • 49
5

I kind of had the same issue and I found your post really helpful. After a bit playing around, I found that your configuration would also work with spring-boot:build-image with the following alterations:

<plugin>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-maven-plugin</artifactId>
    <configuration>
        <image>
            <bindings>
                <binding>${basedir}/bindings/ca-certificates:/platform/bindings/ca-certificates</binding>
            </bindings>
        </image>
    </configuration>
</plugin>

As you can see, I added the <configuration> immediately after <plugin>. That way, it seems that it is parceable by spring-boot:build-image

Nick Valanos
  • 69
  • 7
  • I just realized that I found your answer usefull enough to edit my configuration with it but had not upvoted it. Sry about that and thanks for your contribution. – ch4mp Feb 10 '23 at 22:02