Failed to start polaris-console - bind() to 0.0.0.0:80 failed (13: Permission denied)

[SBatais]

Hello

I have deployed the polaris-console with the helm chart on a kubernetes cluster version 1.29.15 (managed kubernetes cluster Flexible Engine CCE), and it fails to start with the error nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

I did the same on GCP GKE cluster version 1.33, and I didn't encountered the same problem.

Configured nginx for static file serving
Generated config.js with runtime configuration:
// Runtime configuration generated from environment variables
window.APP_CONFIG = {
  VITE_POLARIS_API_URL: 'https://xxxxxxxxxxxxxxxxxxxx',
  VITE_POLARIS_REALM: 'POLARIS',
  VITE_POLARIS_PRINCIPAL_SCOPE: 'openid profile email',
  VITE_OAUTH_TOKEN_URL: 'https://xxxxxxxxxxxxxxxxxx/api/catalog/v1/oauth/tokens',
  VITE_POLARIS_REALM_HEADER_NAME: '',
  VITE_OIDC_ISSUER_URL: 'https://zzzzzzz',
  VITE_OIDC_CLIENT_ID: 'yyyyyyyyyyyyyyyyyyyyyy',
  VITE_OIDC_REDIRECT_URI: 'https://xxxxxxxxxxxxxxxxxx/auth/callback',
  VITE_OIDC_SCOPE: 'openid profile email'
};
nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

Thanks in advance for the help to fix this issue

[jbonofre]

Thanks for the report. Let me take a look.

[SBatais]

I tried to do the installation with the helm custom value service.targetPort: 8080, and I got the same error nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied). Therefore I think that the port of the container is not configurable as it's currently implemented.

[MonkeyCanCode]

I think that is due to we are using non-root user to bind on port 80 which can be disallowed on certain OS. We could add this in the chart to implicitly add the grant but I think it may be better to move away from default and use something likes 8080 instead.

[MonkeyCanCode]

FYI @SBatais , the current main should fix the issue report already and we are making couple more changes in #234 to enhance this (there are breaking changes here compared to the existed chart but better for production graded deployment).

[MonkeyCanCode]

@SBatais PR is merged. Let us know if we should close this ticket.