Merge branch 'main' into legal_docs_update

Dockerfile

@@ -37,6 +37,9 @@ WORKDIR /app
 COPY ./web /app/web
 COPY --from=builder --chown=nonroot:nonroot /app/dashboard /app/dashboard
 
+RUN adduser -u 1000 --disabled-password --gecos "" --no-create-home nonroot
+USER nonroot
+
 ENTRYPOINT ["/app/dashboard"]
 
-CMD ["-in-cluster=true"]
+CMD ["-in-cluster=true"]

charts/app-dashboard/Chart.yaml

@@ -27,7 +27,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.7
+version: 1.0.8
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/app-dashboard/templates/deployment.yaml

@@ -43,6 +43,8 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ include "app-dashboard.serviceAccountName" . }}
+      securityContext:
+        runAsUser: 1000
       containers:
         - name: {{ .Chart.Name }}
           securityContext: