On Saturday, 5 February 2022 at 00:05:18 UTC merson...@actmedical.com.au wrote:
> the same app > rewritten in Go reduces the size by a huge amount as the only thing you > need to include in a scratch base image is the binary plus > some certificates. > I wouldn't put certificates into a container image either, and definitely not the related private keys. I'd store them as kubernetes Secrets and provide them to the container that way. It reduces the exposure of the private keys, and allows certificates to be replaced without rebuilding the image - e.g. to deploy the same container in two different places. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/ebf39aae-aeee-4272-8824-45f9bc17c199n%40googlegroups.com.
