root
8fc88ffc14
Build & Push / Pipeline Tests (push) Failing after 59s
Build & Push / Build & Push Docker Image (push) Has been skipped
Test / Type Check (all packages) (push) Failing after 51s
Test / API Unit Tests (push) Has been skipped
Test / Homepage Unit Tests (push) Has been skipped
Test / Carplace Unit Tests (push) Has been skipped
Test / Admin Unit Tests (push) Has been skipped
Test / Dashboard Unit Tests (push) Has been skipped
Test / API Integration Tests (push) Has been skipped
1005 B
1005 B
ADR-001: Disable per-tenant Docker container orchestration
Status: Accepted (Phase 0 production readiness)
Date: 2026-08-12
Decision
Per-tenant Docker Compose / Docker-socket management is out of production scope. The previous containerService and admin Containers UI must not run in GA.
Context
- The admin UI called
/admin/containers*while matching API routes /CompanyContainermodel were incomplete. containerServicebuilt Compose YAML via string interpolation and expected Docker socket access — a near-host RCE trust boundary inside the business data plane.- Production readiness requires removing privileged incomplete features before scaling.
Consequences
apps/api/src/services/containerService.tsfails closed (501 container_feature_disabled).- Admin containers page shows an explicit out-of-scope notice.
- Any future isolation requirement needs a separate controller with signed templates, quotas, audit, and no tenant-facing Docker socket.