Code development platform for open source projects from the European Union institutions

Skip to content

Draft: Secure the frontend container image

Jonathan Cornelis LODDER requested to merge fix/docker-base-image into develop

!!! DO NOT MERGE YET !!!

This MR introduces a more secure base image of nginx that is unprivileged, and fixes some security vulnerabilities.

Depends on: https://code.europa.eu/oots/devops/oots-common-services-containers/-/merge_requests/24

Please Note: Breaking changes ahead...

This will introduce breaking changes, as the default port is changed to 8080 for security reasons.

We will probably have to update some manifests here:

From a functional point of view, the user would not know the difference, but our containers would be significantly more secure.

Merge request reports