Skip to content

Conversation

@andyatmiami
Copy link
Contributor

@andyatmiami andyatmiami commented Dec 12, 2025

Tilt's live_reload functionality - in addition to the frontend deployment's securityContext that drops ALL capabilities - requires a little more open permissions than we would ever configure on a production Dockerfile

  • Create app directory with correct ownership and switch to non-root user
  • Adjust permissions for package files and source code to support Tilt live updates

While generally a chmod 777 is a pretty "scary" thing to do - as Tilt is really used solely for local development - I opted for this wide open permission to maximum chance of no issues ever arising in the future.

This was not properly being handled on the initial PR that introduced Tilt as called out by @thesuperzapper in his review:

Tilt's `live_reload` functionality - in addition to the `frontend` deployment's `securityContext` that drops ALL capabilities - requires a little more open permissions than we would ever configure on a production `Dockerfile`

- Create app directory with correct ownership and switch to non-root user
- Adjust permissions for package files and source code to support Tilt live updates

Signed-off-by: Andy Stoneberg <[email protected]>
@github-project-automation github-project-automation bot moved this to Needs Triage in Kubeflow Notebooks Dec 12, 2025
@google-oss-prow google-oss-prow bot added area/frontend area - related to frontend components size/S labels Dec 12, 2025
@google-oss-prow google-oss-prow bot added the area/v2 area - version - kubeflow notebooks v2 label Dec 12, 2025
@andyatmiami
Copy link
Contributor Author

/ok-to-test

Copy link

@paulovmr paulovmr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@andyatmiami Nice, I've made the tilt setup in a new machine from scratch and tested the frontend live reload. All worked perfectly, great job!

/lgtm

@ederign
Copy link
Member

ederign commented Dec 15, 2025

/approve
/lgtm

@google-oss-prow
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ederign

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@google-oss-prow google-oss-prow bot merged commit 0bec9f5 into kubeflow:notebooks-v2 Dec 15, 2025
15 checks passed
@github-project-automation github-project-automation bot moved this from Needs Triage to Done in Kubeflow Notebooks Dec 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved area/frontend area - related to frontend components area/v2 area - version - kubeflow notebooks v2 lgtm ok-to-test size/S

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants