search

lsc-sde / iac-flux-jupyter

Flux configuration for JupyterHub
MIT License
1 stars 0 forks source link

Use slim version of hub image to minimise exposure to vulnerabilities #10

Open vvcb opened 10 months ago

vvcb commented 10 months ago

z2jh's security documentation recommends using the slim version of the image for the hub pod. https://z2jh.jupyter.org/en/latest/administrator/security.html#minimal-hub-image

The default hub image includes some useful debugging tools. You can use the slim version of image to minimise your exposure to vulnerabilities in those optional tools.

hub:
  image:
    # The slim variant excludes a few non-essential packages that are useful
    # when debugging something from the hub pod. To use it, apply this
    # configuration.
    #
    name: quay.io/jupyterhub/k8s-hub-slim
qcaas-nhs-sjt commented 7 months ago

@m1p1h

I was thinking that this might be a good place for you to start looking

qcaas-nhs-sjt commented 7 months ago

Linking to lsc-sde/lsc-sde#40 and lsc-sde/lsc-sde#42