devxy/r-builds
Watch
2
0
Fork
You've already forked r-builds
 0
Code Issues 1 Pull requests Releases Activity

Merge pull request #188 from rstudio/security-hub-fixes

Browse source 
Fix read only filesystem security hub error
This commit is contained in:
Joshua C. Forest 2023-09-06 10:01:21 -04:00 • committed by GitHub
commit 5c2d50d5e7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
serverless-resources.yml
View file

@ -147,6 +147,7 @@ rBuildsBatchJobDefinitionUbuntu2004:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2004" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2004"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionUbuntu2204: rBuildsBatchJobDefinitionUbuntu2204:
@ -161,6 +162,7 @@ rBuildsBatchJobDefinitionUbuntu2204:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2204" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2204"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionDebian10: rBuildsBatchJobDefinitionDebian10:
@ -175,6 +177,7 @@ rBuildsBatchJobDefinitionDebian10:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-10" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-10"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionDebian11: rBuildsBatchJobDefinitionDebian11:
@ -189,6 +192,7 @@ rBuildsBatchJobDefinitionDebian11:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-11" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-11"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionDebian12: rBuildsBatchJobDefinitionDebian12:
@ -203,6 +207,7 @@ rBuildsBatchJobDefinitionDebian12:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-12" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-12"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionCentos7: rBuildsBatchJobDefinitionCentos7:
@ -217,6 +222,7 @@ rBuildsBatchJobDefinitionCentos7:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-7" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-7"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionCentos8: rBuildsBatchJobDefinitionCentos8:
@ -231,6 +237,7 @@ rBuildsBatchJobDefinitionCentos8:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-8" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-8"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionRhel9: rBuildsBatchJobDefinitionRhel9:
@ -245,6 +252,7 @@ rBuildsBatchJobDefinitionRhel9:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:rhel-9" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:rhel-9"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionOpensuse154: rBuildsBatchJobDefinitionOpensuse154:
@ -259,6 +267,7 @@ rBuildsBatchJobDefinitionOpensuse154:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:opensuse-154" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:opensuse-154"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionFedora37: rBuildsBatchJobDefinitionFedora37:
@ -273,6 +282,7 @@ rBuildsBatchJobDefinitionFedora37:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-37" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-37"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200
rBuildsBatchJobDefinitionFedora38: rBuildsBatchJobDefinitionFedora38:
@ -287,6 +297,7 @@ rBuildsBatchJobDefinitionFedora38:
JobRoleArn: JobRoleArn:
"Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ]
Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-38" Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-38"
ReadOnlyRootFilesystem: true
Timeout: Timeout:
AttemptDurationSeconds: 7200 AttemptDurationSeconds: 7200