Docker user directives cont

[noah-paige]

Feature or Bugfix

• Bugfix

Detail

• Continuation of https://github.com/data-dot-all/dataall/pull/895/files

Relates

• https://github.com/data-dot-all/dataall/pull/895/files

Security

Please answer the questions below briefly where applicable, or write N/A. Based on
OWASP 10.

• Does this PR introduce or modify any input fields or queries - this includes
  fetching data from storage outside the application (e.g. a database, an S3 bucket)?
  • Is the input sanitized?
  • What precautions are you taking before deserializing the data you consume?
  • Is injection prevented by parametrizing queries?
  • Have you ensured no eval or similar functions are used?
• Does this PR introduce any functionality or component that requires authorization?
  • How have you ensured it respects the existing AuthN/AuthZ mechanisms?
  • Are you logging failed auth attempts?
• Are you using or adding any cryptographic features?
  • Do you use a standard proven implementations?
  • Are the used keys controlled by the customer? Where are they stored?
• Are you introducing any new policies/roles/users?
  • Have you used the least-privilege principle? How?

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[noah-paige]

Fixes / Status Update:

• Local Postgres DB
  • Error Message

2024-01-11 16:22:50 The files belonging to this database system will be owned by user "cuser".
2024-01-11 16:22:50 This user must also own the server process.
2024-01-11 16:22:07 initdb: could not access directory "/var/lib/postgresql/data": Permission denied

Resolved By
- Update to 13.12
- Remove User Commands
- Delete Container and Image and re build to get working with 13.12

• Local ElasticSearch
  • Error Message

java.lang.IllegalStateException: failed to obtain node locks, tried [[/usr/share/elasticsearch/data]] with lock id [0]; maybe these locations are not writable or multiple nodes were started without increasing [node.max_local_storage_nodes] (was [1])?

Resolved By
- Remove User Commands and ReBuild

• Docker Compose AWS Credentials

  • Have to change Mount Volumes for Docker User to get AWS Credentials locally
  • Otherwise getting Credentials Can Not be Located error from botocore because user can not access /.aws/credentials file
  • Resolved By
    • Update docker compose volume mounts

• VPC Facing AWS Deployment

  • Error building Image using frontend/docker/prod/Dockerfile

  • Resolved By

    • Moving WORKDIR /app command

  • Error withe permissions to bind as non-root user on port 80 for nginx

  • Resolved By

    • Adding permissions for user created and editing nginx.conf

Testing:
Local data.all

• Local docker compose up re-building all images
• Access UI
• Create Environment
• Create CDK Pipeline

Local data.all

• CICD Pipeline Completes (Frontend Image Built Successful)
• Access UI
• Create Environment
• Create CDK Pipeline