Dockerfile

FROM nginx:alpine AS certificate
RUN apk add --no-cache openssl
RUN mkdir -p /certs
RUN openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /certs/cert.key -out /certs/cert.pem -subj "/C=US/ST=State/L=City/O=Organization/CN=localhost"

# base - nginx + openshift
#
# https://docs.openshift.com/container-platform/4.13/openshift_images/create-images.html#use-uid_create-images
#
# By default, OpenShift Container Platform runs containers using an arbitrarily assigned user ID.
# This provides additional security against processes escaping the container due to a container engine vulnerability 
# and thereby achieving escalated permissions on the host node.
#
# For an image to support running as an arbitrary user, 
# directories and files that are written to by processes in the image must be owned by the root group
# and be read/writable by that group. Files to be executed must also have group execute permissions.
#
FROM nginx:alpine AS base
COPY --from=certificate /certs/cert.pem /certs/cert.pem
COPY --from=certificate /certs/cert.pem /certs/CA.pem
COPY --from=certificate /certs/cert.key /certs/cert.key
RUN chmod g+rwx /etc/nginx/nginx.conf /etc/nginx/conf.d /etc/nginx/conf.d/default.conf /var/cache/nginx /var/run /var/log/nginx /etc/ssl /certs
ENV SSL_CERTIFICATE=/certs/cert.pem
ENV SSL_CERTIFICATE_KEY=/certs/cert.key
COPY /nginx/nginx.conf /etc/nginx/nginx.conf
EXPOSE 443
CMD ["nginx", "-g", "daemon off;"] 

# awx-ui
FROM base AS awx-ui
COPY /nginx/awx.conf /etc/nginx/templates/default.conf.template
COPY /build/awx /usr/share/nginx/html

# hub-ui
FROM base AS hub-ui
COPY /nginx/hub.conf /etc/nginx/templates/default.conf.template
COPY /build/hub /usr/share/nginx/html

# eda-ui
FROM base AS eda-ui
ENV SSL_CLIENT_CERTIFICATE=/certs/CA.pem
ENV EDA_EVENT_STREAM_SERVER=${EDA_EVENT_STREAM_SERVER:-http://example.com}
ENV EDA_SERVER_UUID=${EDA_SERVER_UUID:-sample_uuid}
COPY /nginx/eda.conf /etc/nginx/templates/default.conf.template
COPY /build/eda /usr/share/nginx/html

# ui-e2e
FROM cypress/base AS ui-e2e
WORKDIR /app
COPY . .
RUN npm ci