fix(k8s): add securityContext (#85)

SocialGouv · Sep 8, 2023 · f7d3825 · f7d3825
1 parent d962fb7
commit f7d3825
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -0,0 +1,5 @@
+app:
+  securityContext:
+    fsGroup: 101
+    runAsGroup: 101
+    runAsUser: 101
diff --git a/Dockerfile b/Dockerfile
@@ -11,7 +11,6 @@ COPY ./yarn.lock .
 
 RUN yarn --frozen-lockfile --ignore-engines
 
-
 COPY . .
 
 ENV NEXT_PUBLIC_MATOMO_SITE_ID="34"
@@ -20,6 +19,6 @@ ENV NODE_ENV=production
 
 RUN yarn --ignore-engines build-static
 
-FROM ghcr.io/socialgouv/docker/nginx:8.0.0
+FROM ghcr.io/socialgouv/docker/nginx:8.2.0
 
-COPY --from=builder /app/out /usr/share/nginx/html
+COPY --from=builder --chown=nginx:nginx /app/out /usr/share/nginx/html