ditkrg/dit-digital-service-manual
4
0
Fork 0
Code Issues Pull Requests Packages Projects 1 Releases Wiki Activity

Use unprivileged alpine container

Browse Source
This commit is contained in:
Shkar T. Noori 2022-02-14 10:05:52 +00:00
parent d0338f1895
commit c6397047b7
No known key found for this signature in database
GPG Key ID: E7AD76088FB6FE02
2 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Dockerfile
View File

@ -13,7 +13,7 @@ COPY *.js ./
RUN npm run build RUN npm run build
FROM bitnami/nginx:1.20 AS production FROM nginxinc/nginx-unprivileged:1.20-alpine AS production
COPY --from=build-stage /app/build /app COPY --from=build-stage /app/build /usr/share/nginx/html
EXPOSE 8080 EXPOSE 8080

9
kubernetes/base/deployment.yaml
View File

@ -18,9 +18,10 @@ spec:
spec: spec:
securityContext: securityContext:
fsGroup: 101
runAsUser: 101
runAsGroup: 101
runAsNonRoot: true runAsNonRoot: true
fsGroup: 1001
sysctls: []
containers: containers:
- name: dsm-client - name: dsm-client
@ -52,7 +53,3 @@ spec:
failureThreshold: 3 failureThreshold: 3
successThreshold: 1 successThreshold: 1
initialDelaySeconds: 5 initialDelaySeconds: 5
securityContext:
runAsUser: 1001
runAsNonRoot: true