Provide CA cert to Blackfire container

[fooman]

When trying to run blackfire via warden against the https secured site via

warden env run blackfire-agent blackfire curl https://${TRAEFIK_SUBDOMAIN:-app}.${TRAEFIK_DOMAIN}

I ran into untrusted certificate issues.

The below works for me on MacOS:

version: "3.5"
services:
    blackfire-agent:
        extra_hosts:
            - ${TRAEFIK_SUBDOMAIN:-app}.${TRAEFIK_DOMAIN}:${TRAEFIK_ADDRESS:-0.0.0.0}
        volumes:
            - ${WARDEN_SSL_DIR}/rootca/certs/ca.cert.pem:/etc/ssl/certs/ca-certificates.crt:ro

It looks like the php-fpm container updates certificates at run time but I wasn't able to figure out a way to cross link just the generated output from the php-fpm container into the blackfire one.

[davidalger]

@fooman Great callout! I've addressed the extra_hosts entry in the 0.4.4 release. The other will require creating a custom Dockerfile to extend the blackfire-agent image with a startup script that does similar to what you found in the startup script for php-fpm. That will perhaps be handled in a future release (ideally 0.5.1), so I'm going to leave this open, but wanted to thank you for sharing here and update with the partial improvement rolled out minutes ago.

[stale]

Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.