Merge pull request #67 from xueli181114/HYPERFLEET-730

HYPERFLEET-730 - fix: copy CA certificates from builder to ubi9-micro runtime

Author: openshift-merge-bot[bot]

Dockerfile

@@ -37,6 +37,8 @@ FROM ${BASE_IMAGE}
 
 WORKDIR /app
 
+# ubi9-micro doesn't include CA certificates; copy from builder for TLS (e.g. Google Pub/Sub)
+COPY --from=builder /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 COPY --from=builder /build/bin/sentinel /app/sentinel
 
 USER 65532:65532