jcoffey-dev
0452d1f921
Only VITE_API_BASE_URL had a matching ARG/ENV pair; docker-compose.yml's build args for VITE_ALERTING_API_BASE_URL and VITE_ENTERPRISE_AUTH_BASE_URL were silently dropped by Docker (an undeclared --build-arg is dropped, not an error). enterpriseAuthBase came out undefined in the built bundle, so the tenant-picker page threw "enterprise-auth is not configured" against a real running container even though docker-compose.yml looked correct. The other two vars masked this because web/src/lib/api.ts's apiBase/alertingBase both have hardcoded fallbacks that happen to match the intended values. Found while wiring a real Auth0 developer tenant into enterprise-auth to close §3a/§12's remaining "real external IdP" gap. Also gitignores docker-compose.override.yml, since that's where such real credentials belong for local testing -- never committed.
38 lines
1.7 KiB
Docker
38 lines
1.7 KiB
Docker
# Build context can be just web/ (unlike agent/ingest/api, this doesn't
|
|
# need /proto):
|
|
# docker build -f web/Dockerfile -t sentry-web web/
|
|
|
|
FROM node:22-alpine AS builder
|
|
WORKDIR /src
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci
|
|
COPY . .
|
|
# All three VITE_* vars are baked in at build time — this is a
|
|
# prerendered static site, not a server. Override with --build-arg for
|
|
# non-default deployments. Each one needs its own ARG: an undeclared
|
|
# --build-arg from docker-compose.yml's build.args is silently dropped
|
|
# by Docker, not an error -- confirmed the hard way when
|
|
# VITE_ALERTING_API_BASE_URL/VITE_ENTERPRISE_AUTH_BASE_URL were being
|
|
# passed in but only VITE_API_BASE_URL was ever declared here, so the
|
|
# other two never reached `npm run build` even though docker-compose.yml
|
|
# looked correct. VITE_ENTERPRISE_AUTH_BASE_URL has no default (unlike
|
|
# the other two) -- web/src/lib/api.ts treats it as intentionally
|
|
# undefined when unset, meaning "enterprise-auth isn't deployed", not
|
|
# "use some fallback host."
|
|
ARG VITE_API_BASE_URL=http://localhost:8080
|
|
ARG VITE_ALERTING_API_BASE_URL=http://localhost:8081
|
|
ARG VITE_ENTERPRISE_AUTH_BASE_URL
|
|
ENV VITE_API_BASE_URL=${VITE_API_BASE_URL}
|
|
ENV VITE_ALERTING_API_BASE_URL=${VITE_ALERTING_API_BASE_URL}
|
|
ENV VITE_ENTERPRISE_AUTH_BASE_URL=${VITE_ENTERPRISE_AUTH_BASE_URL}
|
|
RUN npm run build
|
|
|
|
# Not distroless: serving a static SPA needs *some* HTTP server, and
|
|
# nginx:alpine is the boring, well-understood choice for that job — a
|
|
# custom static-file-serving binary would be more engineering than a
|
|
# Phase 0 placeholder page warrants. See /web/README.md.
|
|
FROM nginx:alpine
|
|
COPY --from=builder /src/build /usr/share/nginx/html
|
|
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
|
EXPOSE 3000
|