Of course, Brian. I meant the CA Certificates. Merson On Saturday, February 5, 2022 at 8:11:49 PM UTC+11 Brian Candler wrote:
> On Saturday, 5 February 2022 at 00:05:18 UTC merson...@actmedical.com.au > wrote: > >> the same app >> rewritten in Go reduces the size by a huge amount as the only thing you >> need to include in a scratch base image is the binary plus >> some certificates. >> > > I wouldn't put certificates into a container image either, and definitely > not the related private keys. I'd store them as kubernetes Secrets and > provide them to the container that way. It reduces the exposure of the > private keys, and allows certificates to be replaced without rebuilding the > image - e.g. to deploy the same container in two different places. > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/8e1a259f-3590-46d3-8db6-cba60fe86907n%40googlegroups.com.
