feat(docker-registry-ui): add support to nginx user and custom container port

Author: Joxit

charts/docker-registry-ui/templates/ui-deployment.yaml

@@ -1,3 +1,7 @@
+{{- if and (not .Values.ui.runAsRoot) (lt (.Values.ui.service.targetPort | int) 1024) }}
+{{ fail "When `ui.runAsRoot` is false `ui.service.targetPort` must be less than 1024." }}
+{{- end }}
+
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -65,6 +69,8 @@ spec:
               value: {{ .Values.ui.catalogElementsLimit | quote }}
             - name: HISTORY_CUSTOM_LABELS
               value: {{ .Values.ui.historyCustomLabels | join "," }}
+            - name: NGINX_LISTEN_PORT
+              value: {{ .Values.ui.service.targetPort | quote }}
           ports:
             - name: http
               containerPort: {{ .Values.ui.service.targetPort }}
@@ -83,6 +89,10 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 | trim }}
     {{- end }}
+    {{- if not .Values.ui.runAsRoot }}
+      securityContext:
+        runAsUser: 101
+    {{- end }}
     {{- if .Values.ui.additionalSpec }}
       {{ tpl .Values.ui.additionalSpec . | nindent 6 | trim }}
     {{- end }}

charts/docker-registry-ui/values.yaml

@@ -39,6 +39,8 @@ ui:
   # Example:
   # nginxProxyPassHeaders: [ my-first-header, my-second-header ]
   nginxProxyPassHeaders: []
+  # Use root or nginx user inside the container, when this is false the target port must be greater or equal to 1024.
+  runAsRoot: true
   # The name and tag of the docker image of the interface
   image: joxit/docker-registry-ui:2.2.1
   # Override default image pull secrets