fix(secu): securityContect (#1043)

SocialGouv · Aug 30, 2023 · f026e8e · f026e8e
1 parent ec0d570
commit f026e8e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -2,7 +2,11 @@ app:
   ~chart: app # implicit
   ~needs: [build-app]
   containerPort: 8080
-  imagePackage: app # implicit
+  securityContext:
+    fsGroup: 101
+    runAsGroup: 101
+    runAsNonRoot: true
+    runAsUser: 101
   ingress:
     annotations:
       nginx.ingress.kubernetes.io/configuration-snippet: |

diff --git a/Dockerfile b/Dockerfile
@@ -6,6 +6,6 @@ RUN yarn --production --frozen-lockfile --prefer-offline && yarn cache clean
 RUN yarn build
 RUN yarn export
 
-FROM ghcr.io/socialgouv/docker/nginx:8.0.2
+FROM ghcr.io/socialgouv/docker/nginx:8.2.0
 
 COPY --from=builder --chown=nginx:nginx /out /usr/share/nginx/html