Merge pull request #87 from JesseStutler/release-0.1-cherry-pick

[Cherry-pick] Add security context configuration and bump image to v0.1.1

Author: volcano-sh-bot

deployment/build/frontend/Dockerfile

@@ -16,6 +16,6 @@ COPY --from=builder /app/build /usr/share/nginx/html
 
 COPY frontend/nginx.conf /etc/nginx/nginx.conf
 
-EXPOSE 80
+EXPOSE 8080
 
 CMD ["nginx", "-g", "daemon off;"]

deployment/volcano-dashboard.yaml

@@ -16,22 +16,51 @@ spec:
       labels:
         app: volcano-dashboard
     spec:
+      securityContext:
+        seLinuxOptions:
+          level: s0:c123,c456
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: volcano-dashboard
       containers:
-        - image: volcanosh/vc-dashboard-frontend:v0.1.0
+        - image: volcanosh/vc-dashboard-frontend:v0.1.1
           imagePullPolicy: Always
           name: frontend
           ports:
-            - containerPort: 80
+            - containerPort: 8080
               name: frontend
               protocol: TCP
-        - image: volcanosh/vc-dashboard-backend:v0.1.0
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+              - ALL
+            runAsNonRoot: true
+            runAsUser: 1000
+          volumeMounts:
+            - mountPath: /var/cache/nginx
+              name: nginx-cache
+            - mountPath: /run
+              name: nginx-run
+        - image: volcanosh/vc-dashboard-backend:v0.1.1
           imagePullPolicy: Always
           name: backend
           ports:
             - containerPort: 3001
               name: backend
               protocol: TCP
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+              - ALL
+            runAsNonRoot: true
+            runAsUser: 1000
+      volumes:
+        - name: nginx-cache
+          emptyDir: {}
+        - name: nginx-run
+          emptyDir: {}
 ---
 
 # volcano dashboard serviceAccount
@@ -115,6 +144,6 @@ spec:
     - name: frontend
       port: 80
       protocol: TCP
-      targetPort: 80
+      targetPort: 8080
   selector:
     app: volcano-dashboard

frontend/nginx.conf

@@ -3,7 +3,7 @@ events {}
 http {
     include  mime.types;
     server {
-        listen 80;
+        listen 8080;
         server_name localhost;
 
         location / {