#598 update fastapi base image to use redhat ubi image for better CVE adaptment

Author: csun-cpointe

DRAFT_RELEASE_NOTES.md

@@ -87,6 +87,10 @@ To start your aiSSEMBLE upgrade, update your project's pom.xml to use the 1.11.0
 The hive service base image has been switched from `docker.io/eclipse-temurin:17-jre` to `registry.access.redhat.com/ubi9/openjdk-17-runtime:1.21`. 
 Projects should update their Hive service Dockerfile or any related startup configuration script to use `microdnf` instead `apt-get` as the package manager if applicable
 
+### For projects that have customized the FastAPI
+The fastapi base image has been switched from `docker.io/python:3.11` to `registry.access.redhat.com/ubi9/python-311:9.5`. 
+There may be adjustments needed if applicable.
+
 ## Final Steps - Required for All Projects
 ### Finalizing the Upgrade
 1. Run `./mvnw org.technologybrewery.baton:baton-maven-plugin:baton-migrate` to apply the automatic migrations

extensions/extensions-docker/aissemble-fastapi/pom.xml

@@ -22,5 +22,52 @@
             </plugin>
         </plugins>
     </build>
+    <profiles>
+        <profile>
+            <id>integration-test</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>${group.fabric8.plugin}</groupId>
+                        <artifactId>docker-maven-plugin</artifactId>
+                        <executions>
+                            <execution>
+                                <id>test-image</id>
+                                <phase>integration-test</phase>
+                                <configuration>
+                                    <images>
+                                        <image>
+                                            <run>
+                                                <wait>
+                                                    <http>
+                                                        <url>http://localhost:8080</url>
+                                                        <method>GET</method>
+                                                        <status>200</status>
+                                                    </http>
+                                                </wait>
+                                                <ports>
+                                                    <port>8080:80</port>
+                                                </ports>
+                                            </run>
+                                        </image>
+                                    </images>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <executions>
+                            <execution>
+                                <id>test-image-cleanup</id>
+                                <phase>post-integration-test</phase>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
 
 </project>

extensions/extensions-docker/aissemble-fastapi/src/main/resources/docker/Dockerfile

@@ -1,6 +1,6 @@
 # Script for creating base FastAPI Docker image
 
-FROM docker.io/python:3.11
+FROM registry.access.redhat.com/ubi9/python-311:9.5
 
 LABEL org.opencontainers.image.source="https://github.com/boozallen/aissemble"
 
@@ -12,7 +12,7 @@ RUN pip install --no-cache-dir --upgrade -r /tmp/requirements.txt
 
 # Custom start script to run fastAPI with specific
 # module (defined using MODULE environment variable)
-COPY ./src/main/resources/docker/scripts/start.sh /start.sh
+COPY --chown=default:root ./src/main/resources/docker/scripts/start.sh /start.sh
 RUN chmod +x /start.sh
 
 # Add FastAPI module