Get "https://index.docker.io/v2/": x509: certificate signed by unknown authority

[alexec]

I think we need to copy ca-certificates onto the workflow-controller image.

See #6635

failed to look-up entrypoint/cmd for image "golang:1.18", you must either explicitly specify the command, or list the image's command in the index: https://argoproj.github.io/argo-workflows/workflow-executors/#emissary-emissary: Get "https://index.docker.io/v2/": x509: certificate signed by unknown authority

Using scratch causes many small issue like this. Maybe we should use distroless instead?

https://github.com/GoogleContainerTools/distroless/blob/main/base/README.md

[dvaldivia]

@alexec is there a way to add additional certificates from the workflow-controller-configmap ?