Stateless Docker Container

[icrc-fdeniger]

At startup, the container modifies some files in /service/api/build/static/webapp.
On Kubernetes/OpenShift these folder are in read only mode ( stateless container approach).

A quick and dirty solution is to add this command in the image:

RUN chmod -R a+rwX /service/api/build/static/webapp

Describe the solution you'd like
The image should be fully operational at startup without requiring a build phase.

This issue might be related to #9141 and could potentially be resolved using a multi-stage build process.

[mrjones-plip]

@Hareet or @dianabarsan - thoughts on @icrc-fdeniger question?

It was my understanding that our images either bind mount key points they need to write to or are otherwise immutable and ok to reboot with 100% data loss of the non persistent data.

[icrc-fdeniger]

it "seems" that some build process is completed at container startup. If it's the case it should done at build image phase.

[mrjones-plip]

Ah - I see what you mean now about a true read only container in k8s or OpenShift vs an ephemerally writable docker container.

Do you have an audit of all the instances you've had to change? Taking a look around, I see for example this entry point creates a directory.

I can also see how #9141 could relate to possibly fix this if we do some updates - thanks for making the comparison and searching for other tickets!

[icrc-fdeniger]

thanks @mrjones-plip for your feedbacks.
The issue is that the content of the folder /service/api/build/static/webapp is modified at startup ( some js files). Normally these content should be changed and be all computed at docker build stage.