Merge branch 'develop' into feature/ohid-420_upload_additional_document_to_ha

Author: rshourou

document-manager/backend/openshift.dockerfile

@@ -1,10 +1,12 @@
-FROM public.ecr.aws/bitnami/python:3.12.4
-
-WORKDIR /opt/app-root/src
+FROM python:3.12.4
 
+WORKDIR /opt/app-root/src/
 
 # Install dependencies
-RUN install_packages gcc libc6-dev libpq-dev libmagic-dev
+RUN apt-get update -yqq && \
+    apt-get install -y gcc libc6-dev libpq-dev libmagic-dev && \
+    rm -rf /var/lib/apt/lists/*
+
 
 # Install the requirements
 COPY ./requirements.txt .
@@ -14,9 +16,13 @@ RUN pip install wheel && \
 RUN apt-get purge -y --auto-remove gcc libc6-dev
 
 COPY . .
+# 4. CRITICAL FOR OPENSHIFT: Fix permissions for random user execution
+RUN chgrp -R 0 /opt/app-root && \
+    chmod -R g=u /opt/app-root && \
+    chmod +x /opt/app-root/src/app.sh
 
 ENV FLASK_APP app.py
 
 # Run the server
 EXPOSE 5001 9191
-ENTRYPOINT /opt/app-root/src/app.sh backend
+ENTRYPOINT ["./app.sh", "backend"]

infrastructure/backup-container.yml

@@ -1,6 +1,6 @@
 # A Sidecar for collecting/processing Logs
 
-[Fluent-bit](https://docs.fluentbit.io/manual/about/what-is-fluent-bit) is basically a `log forwarder` tool that can be run as a sidecar container (a docker image) in each pod containing our apps, although it can also be deployed as a stand-alone service (servicing multiple apps). Fluent-bit can forward logs to lots of different outputs for example, HTTP, Opensearch, Slack, AWS Lamda and a lot more (see: https://docs.fluentbit.io/manual/pipeline/outputs). The steps required for deploying a Fluent-bit sidecar are shown below. Note: These steps are to deploy the sidecar.
+[Fluent-bit](https://docs.fluentbit.io/manual/about/what-is-fluent-bit) is basically a `log forwarder` tool that can be run as a sidecar container (a docker image) in each pod containing our apps, although it can also be deployed as a stand-alone service (servicing multiple apps). Fluent-bit can forward logs to lots of different outputs for example, HTTP, Opensearch, Slack, AWS Lamda and a lot more (see: https://docs.fluentbit.io/manual/pipeline/outputs). 
 
 You can read about a common-service-showcase in BCGOV which has deployed a Fluent-bit sidecar for CDOGS node application [here](https://github.com/bcgov/common-service-showcase/wiki/Logging-to-a-Sidecar).
 

infrastructure/fluentbit/README.md

@@ -0,0 +1,7 @@
+apiVersion: v2
+name: prime
+description: Prime Helm Chart
+icon: https://www2.gov.bc.ca/StaticWebResources/static/gov3/images/gov_bc_logo.svg
+type: application
+version: 0.1.0
+appVersion: "0.1.0"