security: fix sec vulnerabilities in container

GoogleCloudPlatform / point-of-sale

Anthos Edge Use Cases for bringing apps and computation closer to the location where the action is, to improve response times and save bandwidth.

Apache License 2.0

36 stars 18 forks source link

security: fix sec vulnerabilities in container #179

Closed Shabirmean closed 1 year ago

Shabirmean commented 2 years ago

Fixes #178

Description

The changes are fixes to security vulnerabilities reported by the GKE Security Posture Scan(internal access only)

Shabirmean commented 2 years ago

/gcbrun

mathieu-benoit commented 1 year ago

Hi @Shabirmean, is there anything missing to have this one approved/merged into main branch?

Shabirmean commented 1 year ago

@mathieu-benoit - the changes prevent Springboot from starting up because of trying to access the root owned /tmp directory. Need to test and validate how overcome it.

Shabirmean commented 1 year ago

:zap: Two deployments have been created for the Point-of-Sale application. You may access and test them at: :zap:

MySQL DB backed deployment: 34.172.202.14
Embedded H2 DB backed deployment: 35.232.176.222