quickstart-openshift

quickstart-openshift copied to clipboard

--- Thanks for the PR! Deployments, as required, will be available below: - [Frontend](https://quickstart-openshift-2341-frontend.apps.silver.devops.gov.bc.ca) - [Backend](https://quickstart-openshift-2341-frontend.apps.silver.devops.gov.bc.ca/api) Please create PRs in draft mode. Mark as ready to enable: - [Analysis Workflow](https://github.com/bcgov/quickstart-openshift/actions/workflows/analysis.yml)...

DerekRoberts

ZAP Security Report: backend

1

- Site: [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca) **New Alerts** - **Content Security Policy (CSP) Header Not Set** [10038] total: 4: - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/api) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml) - **Permissions Policy Header Not Set**...

github-actions[bot]

ZAP Security Report: frontend

1

- Site: [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca) **New Alerts** - **Content Security Policy (CSP) Header Not Set** [10038] total: 3: - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml) - **Hidden File Found** [40035] total: 4: -...

github-actions[bot]

https://code.visualstudio.com/docs/copilot/copilot-customization

DerekRoberts

fix: pipeline to wait for crunchy to rollout fully to deploy stack

2

**Describe the Bug** currently pipeline is not waiting for crunchy to be available and rolling out app stack leading to failures, this would only happen for the first time deploy....

mishraomp

@marcellmueller has a pretty slick setup with more workflow calls and less separate event handlers. Investigate and steal as appropriate! https://github.com/bcgov/nr-rec-resources/blob/main/.github/workflows/main.yml

DerekRoberts

Either make Helm simpler or pull it out. Do the same for the alternate backends repo.

DerekRoberts

Current network policies are very permissive, which makes sense for a template. Current back end needs to be exposed to work with a single page app (SPA) anyway. Investigate Caddy...

DerekRoberts

Provide links and/or comment for custom actions into workflows to make adoption easier.

DerekRoberts

Most teams want the frontend as their front-facing URL. Remove `-frontend` from those routes. ...which seems really obvious in retrospect.

DerekRoberts