root
8fc88ffc14
Build & Push / Pipeline Tests (push) Failing after 59s
Build & Push / Build & Push Docker Image (push) Has been skipped
Test / Type Check (all packages) (push) Failing after 51s
Test / API Unit Tests (push) Has been skipped
Test / Homepage Unit Tests (push) Has been skipped
Test / Carplace Unit Tests (push) Has been skipped
Test / Admin Unit Tests (push) Has been skipped
Test / Dashboard Unit Tests (push) Has been skipped
Test / API Integration Tests (push) Has been skipped
21 lines
1005 B
Markdown
21 lines
1005 B
Markdown
# ADR-001: Disable per-tenant Docker container orchestration
|
|
|
|
**Status:** Accepted (Phase 0 production readiness)
|
|
**Date:** 2026-08-12
|
|
|
|
## Decision
|
|
|
|
Per-tenant Docker Compose / Docker-socket management is **out of production scope**. The previous `containerService` and admin Containers UI must not run in GA.
|
|
|
|
## Context
|
|
|
|
- The admin UI called `/admin/containers*` while matching API routes / `CompanyContainer` model were incomplete.
|
|
- `containerService` built Compose YAML via string interpolation and expected Docker socket access — a near-host RCE trust boundary inside the business data plane.
|
|
- Production readiness requires removing privileged incomplete features before scaling.
|
|
|
|
## Consequences
|
|
|
|
- `apps/api/src/services/containerService.ts` fails closed (`501 container_feature_disabled`).
|
|
- Admin containers page shows an explicit out-of-scope notice.
|
|
- Any future isolation requirement needs a separate controller with signed templates, quotas, audit, and no tenant-facing Docker socket.
|