cert

var SystemCertPath = func() string {
	switch runtime.GOOS {
	case "darwin":

		return "/opt/homebrew/etc/ca-certificates/cert.pem"
	default:
		return CanonicalCertPath
	}
}()

SystemCertPath is the default location of the system trust store, initialized at runtime once.

This assumes the Envoy running in a very specific environment. For example, the default location of the system trust store on Debian derivatives like the envoy-proxy image being used by the infrastructure controller.

TODO: this might be configurable by an env var or EnvoyGateway configuration.