From c7145508f93a7b6c2857d6761b4dcd4ab25e4ae0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zsolt=20Kacs=C3=A1ndi?= Date: Thu, 8 Aug 2024 09:24:42 +0200 Subject: [PATCH] chore(ui): use nginx-unprivileged base image for the UI --- .../kubernetes/helm/vmclarity/templates/ui/deployment.yaml | 4 ++++ ui/Dockerfile | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml b/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml index 584469e0f..4f91c0a8b 100644 --- a/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml +++ b/installation/kubernetes/helm/vmclarity/templates/ui/deployment.yaml @@ -38,9 +38,13 @@ spec: name: tmpfs-1 - mountPath: /var/cache/nginx name: tmpfs-2 + - mountPath: /tmp + name: tmpfs-3 volumes: - name: tmpfs-1 emptyDir: {} - name: tmpfs-2 emptyDir: {} + - name: tmpfs-3 + emptyDir: {} serviceAccountName: {{ include "vmclarity.ui.serviceAccountName" . }} diff --git a/ui/Dockerfile b/ui/Dockerfile index 8ea8200ab..993a4070a 100644 --- a/ui/Dockerfile +++ b/ui/Dockerfile @@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/src/ui/node_modules \ RUN --mount=type=cache,target=/src/ui/node_modules \ npm run build --prefix /src/ui -FROM nginx:1.27.0@sha256:6af79ae5de407283dcea8b00d5c37ace95441fd58a8b1d2aa1ed93f5511bb18c +FROM nginxinc/nginx-unprivileged:1.27.0 COPY --from=site-build ["/src/ui/build", "/usr/share/nginx/html"]