chore(ui): use nginx-unprivileged base image for the UI

openclarity · Aug 8, 2024 · c714550 · c714550
1 parent fe422da
commit c714550
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml b/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml
@@ -38,9 +38,13 @@ spec:
               name: tmpfs-1
             - mountPath: /var/cache/nginx
               name: tmpfs-2
+            - mountPath: /tmp
+              name: tmpfs-3
       volumes:
         - name: tmpfs-1
           emptyDir: {}
         - name: tmpfs-2
           emptyDir: {}
+        - name: tmpfs-3
+          emptyDir: {}
       serviceAccountName: {{ include "vmclarity.ui.serviceAccountName" . }}
diff --git a/ui/Dockerfile b/ui/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/src/ui/node_modules \
 RUN --mount=type=cache,target=/src/ui/node_modules \
     npm run build --prefix /src/ui
 
-FROM nginx:1.27.0@sha256:6af79ae5de407283dcea8b00d5c37ace95441fd58a8b1d2aa1ed93f5511bb18c
+FROM nginxinc/nginx-unprivileged:1.27.0
 
 COPY --from=site-build ["/src/ui/build", "/usr/share/nginx/html"]