Default to certifi when using slim docker containers

Open

#812 opened on Jan 28, 2022 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 3/5
Estimated time: 1-2 days
Newbie friendliness: 38/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: docker, python
Domain: api

Research direction

Start at the Configuration entry point, focusing on how ssl_ca_cert is passed to urllib3. Reproduce the missing-system-certificate case in the official Python slim container, then verify that the client uses certifi by default without an explicit Configuration override.

Written by the indexing model from the issue text.

Description

kind/feature-request stale

The urllib3 package defaults to using system certs, however, if they aren't there its never detected by urllib3. It would be nice if the Datadog API client could at the very least detect this and default to certifi.

This is relevant for doing pure python docker containers with the need for extra install overhead with the OS package manager. In my case I pull from the official python docker in order to build my WSGI apps.

Thankfully there's a workaround since the Configuration object passes a lot of the same options into urllb3 I'm able to add it.

Configuration(
            ssl_ca_cert=certifi.where()
)

Dominant language: Python
Stars: 166
Forks: 55
Avg merge: 2d 17h
Merged PRs (30d): 73

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[essnmx] Fix typo in NXLauetof application definition Open

essnmx good first issue

Difficulty 1/5 Under an hour Newbie friendliness 95/100

scipp/ess#760 · Opened Sep 23, 2026
[Feature] 奇物选择添加优先级 Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

syfoud/Simulated_Scepter#174 · Opened Sep 23, 2026
garak adapter grades a NaN detector score as PASS Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

Giskard-AI/giskard-oss#2840 · 1 comment · Opened Sep 23, 2026
A claim comment carrying the issue number is silently declined while the workflow reports success Open

area: repo bug perceived difficulty: 2

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

Nitjsefnie-Harness-Commons/daedalus#926 · Opened Sep 23, 2026
`IOCExtractor` always fails: `ioc_analyzer.build()` takes 1 argument but the agent dispatcher passes 2 Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

yeti-platform/yeti#1380 · Opened Sep 23, 2026

More Python issues