Opus: Include AWS RDS CA bundle for SSL verification (#104)

Co-authored-by: Claude Opus 4.5 <[email protected]>

Author: paweljw

beyla/Dockerfile

@@ -29,6 +29,11 @@ RUN apt-get update && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
+# Download AWS RDS CA bundle and update system CA store
+RUN curl -sS https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem \
+    -o /usr/local/share/ca-certificates/aws-rds.crt \
+    && update-ca-certificates
+
 # Create necessary directories
 RUN mkdir -p /etc/supervisor/conf.d /var/log/supervisor /enrichment /bootstrap
 

collector/Dockerfile

@@ -18,8 +18,14 @@ RUN apt-get update && apt-get install -y \
   certbot \
   openssl \
   traceroute \
+  ca-certificates \
   && rm -rf /var/lib/apt/lists/*
 
+# Download AWS RDS CA bundle and update system CA store
+RUN curl -sS https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem \
+  -o /usr/local/share/ca-certificates/aws-rds.crt \
+  && update-ca-certificates
+
 # Copy Vector from vector image
 COPY --from=vector --chmod=755 /usr/bin/vector /usr/local/bin/vector
 COPY --from=vector /etc/vector /etc/vector