Skip to content

Security error in Dockerfile in inner-circle-ui #239

@SaraevaAnastasia

Description

@SaraevaAnastasia

Sonar security check is connected only in inner-circle-ui, so in other services nothing blocks the pipelines and such issues don’t appear.

Things to pay attention to:

In this solution, we switch the Docker image to nginx-unprivileged, which doesn’t use a root user by default. Since using port 80 requires root privileges, we changed the ports to 8080 instead.

To make this work, you also need to override the container port in local-env, in the values-ui.yaml.gotmpl file, and set it to 8080.

We decided to keep this research as an experiment for now, since migrating all services to port 8080 would take a lot of time and resources.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions