Kubernetes: Fix file uploads

[gXkch]

• This fixes a server error caused by missing volumeMounts on the Squest container. A securityContext is needed too since the user ID is 999.
• Also sets the volumes on the NGINX container to readOnly to match with the docker-compose deployment.
• Move the ldap_config.py file to the Squest container.
• Add missing django-media volumeMounts

[Sispheor]

Not sure that static is needed as it's served by nginx.

[Sispheor]

Do you have the logs concerning the error you get so we can try to reproduce?

[gXkch]

This is the log I get in the squest container when trying to access an uploaded portfolio image:

2024/03/11 22:47:43 [error] 7#7: *1 open() "/app/media/portfolio_image/icon-250272462.png" failed (2: No such file or directory), client: 10.42.1.161, server: , request: "GET /media/portfolio_image/icon-2502724 62.png HTTP/1.1", host: "squest.internal", referrer: "https://squest.internal/ui/service-catalog/"

I have not set a securityContext and neither have I configured any volume Mounts on the squest container.

However, when I do set the securityContext to 999 and mount /app/media in the Squest container I am able to load / display the image in the browser. I had the issue that the Squest container did not have permissions to create directories / files in the volume when I did NOT set the securityContext to 999.

Upon further testing I do agree that /app/static is only needed in the NGINX container and I will remove this mound from the Squest container.

[Sispheor]

Indeed the squest image user named "django" is using id 999.
Just wondering now if it will work in Openshift as it generate a random ID.

[gXkch]

Then how do you handle the migration job which also sets the fsGroup to 999?

squest/k8s/squest_k8s/tasks/05-django.yml

Lines 116 to 117 in dc6c147

	securityContext:
	fsGroup: 999

[Sispheor]

Oh yes it's there already 😅.
Well... lt's merge the !

[Sispheor]

Could you Squash your commit into a single one?

[gXkch]

Done.

[Sispheor]

Thank you for your contribution.