To load in custom CA root certificates into a container image, I usually use this method in a Dockerfile. I also recently learned of another possible method using SSL_CERT_FILE.

Using Ko, I was able to add my custom CA root certificates by baking them into a custom image and then overriding the default Ko base image to use the custom image.

However, given the common use case of adding a custom root CA (ex: accessing sites in a private corporate network with a private corporate CA), I am wondering if loading in custom CA root certificates should have a first-class configuration option within Ko.