Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TRG 4.07: Read-Only Filesystem #189

Closed
2 tasks
typecastcloud opened this issue Jul 9, 2024 · 0 comments · Fixed by #190
Closed
2 tasks

TRG 4.07: Read-Only Filesystem #189

typecastcloud opened this issue Jul 9, 2024 · 0 comments · Fixed by #190
Assignees
@typecastcloud
Labels
enhancement New feature or request

Comments

@typecastcloud
Copy link
Contributor

Description

Security setting for sdfactory deployment. Mounted tmp directory is required for spring to run with readOnlyRootFilesystem set to true.

Why

  1. Trivy KSV014
  2. TRG 4.07

Acceptance Criteria

  • [Service works as the same as before]
  • [Security alert is resolved]

Additional Information

Default sprint temp folder path is /tmp
@typecastcloud typecastcloud added the enhancement New feature or request label Jul 9, 2024
@typecastcloud typecastcloud self-assigned this Jul 9, 2024
typecastcloud added a commit to Cofinity-X/entry-sd-factory that referenced this issue Jul 9, 2024
@typecastcloud
chore(deployment): enable readOnlyRootFilesystem
9155fdb 
This resolves KSV014 from trivy. Is also required by guideline: https://eclipse-tractusx.github.io/docs/release/trg-4/trg-4-07/#why

Refs: eclipse-tractusx#189
@typecastcloud typecastcloud mentioned this issue Jul 9, 2024
Merged
2 tasks
evegufy pushed a commit that referenced this issue Jul 31, 2024
@typecastcloud
chore(deployment): enable readOnlyRootFilesystem (#190)
d3c6e5f 
* chore(deployment): enable readOnlyRootFilesystem

This resolves KSV014 from trivy. Is also required by guideline: https://eclipse-tractusx.github.io/docs/release/trg-4/trg-4-07/#why

Refs: #189
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@typecastcloud typecastcloud

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore(deployment): enable readOnlyRootFilesystem Cofinity-X/entry-sd-factory
1 participant
@typecastcloud