-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Sonar security check is connected only in inner-circle-ui, so in other services nothing blocks the pipelines and such issues don’t appear.
Things to pay attention to:
-

This issue is solved on our side by having a dockerignore file, but Sonar scans files separately, so we just need to mark it as safe. -

We found a solution, which is presented in the PR: experiment: update dockerfile for security inner-circle-ui#88
In this solution, we switch the Docker image to nginx-unprivileged, which doesn’t use a root user by default. Since using port 80 requires root privileges, we changed the ports to 8080 instead.
To make this work, you also need to override the container port in local-env, in the values-ui.yaml.gotmpl file, and set it to 8080.
We decided to keep this research as an experiment for now, since migrating all services to port 8080 would take a lot of time and resources.