Merge branch 'main' into adding-sentry

Author: n3rdc4ptn

.env.template

@@ -1,4 +1,8 @@
 VITE_ENVIRONMENT=
+# Sentry DSN configuration, no need to be set for local setup
+VITE_SENTRY_DSN=
+BFF_SENTRY_DSN=
+
 
 # OpenID Connect Configuration for Onboarding API
 OIDC_ISSUER=
@@ -21,5 +25,5 @@ SESSION_SECRET=
 FEEDBACK_SLACK_URL=
 FEEDBACK_URL_LINK=
 
-# Sentry DSN
-VITE_SENTRY_DSN=
+# frame-ancestors attribute of CSP. Separate multiple values with a space
+FRAME_ANCESTORS=

Dockerfile

@@ -1,6 +1,6 @@
 # Use the latest LTS version of Node.js
 # https://hub.docker.com/_/node
-FROM node:22@sha256:2fa6c977460b56d4d8278947ab56faeb312bc4cc6c4cf78920c6de27812f51c5 AS build-stage
+FROM node:22@sha256:9e6918e8e32a47a58ed5fb9bd235bbc1d18a8c272e37f15d502b9db9e36821ee AS build-stage
 WORKDIR /usr/src/app
 
 # Copy package.json and package-lock.json
@@ -15,7 +15,7 @@ COPY . .
 RUN npm run build
 
 # The same image but now only install the production dependencies as the frontend is already built using vite in the build-stage
-FROM gcr.io/distroless/nodejs22-debian12@sha256:fd90468f47e91d0d3c9bc055c8c09edbf0c225c3c795d0c266e2ca94b3ba17e3 AS production
+FROM gcr.io/distroless/nodejs22-debian12@sha256:b765815eafacee5222bfa50179028f41dd8c642b68ad68ec4e6922d3b1ff2710 AS production
 
 WORKDIR /usr/src/app
 

README.md

@@ -2,44 +2,72 @@
 
 # ui-frontend
 
-## About this project
+## About This Project
 
 This repository contains code relevant for the frontend component required in the Managed Control Plane UI (MCP UI), which is part of the @openmcp-project, more info [here](https://github.com/openmcp-project).
 
 The MCP UI enables endusers to work with Managed Control Planes, without having to use kubectl. Note that the current focus of the UI is on displaying information about the various managed resources, as well as the MCP instances themselves. It is also possible to check the status of the resources, and display / copy their YAML representations.
 
 Overall, the UI provides an easy jump-start for everyone interested in checking the status of Managed Control Planes, without having to use kubectl.
 
-## Requirements and Setup
+## Getting Started
 
-### Development
+### Development Setup
 
-1. install dependencies: `npm i`
+#### Install Dependencies
 
-1. Copy the `frontend-config.json` to `public/frontend-config.json` and adapt the `backendUrl` according to your setup (see section Dynamic Frontend Config).
+```bash
+npm i
+```
+
+#### Configure Frontend
+
+- Copy `frontend-config.json` to `public/frontend-config.json` and adapt the `backendUrl` according to your setup (see section Dynamic Frontend Config).
+- Copy `.env.template` to `.env` and fill in the missing values.
 
-1. Connect to the ui-backend server
-   **Run it locally**:
-    - See `https://github.com/openmcp-project/ui-backend`
+#### Run the Application
+
+```bash
+npm run dev
+```
 
-1. Start the application:
+The UI will be served on http://localhost:5173.
 
-   Run `npm run dev`
 
-### Build
+#### Safari Support
 
-1. Build the application:
+**Note:** The frontend is currently incompatible with Safari when running locally on `localhost`.
 
-   Run `npm run build`
+To enable local development with Safari, follow these steps on your local machine:
 
-2. Serve the application locally:
+1. **Update Cookie Settings:**  
+   In [`server/encrypted-session.js`](server/encrypted-session.js), set the `secure` property to `false` in both occurrences.
 
-   Run `npm run preview`
+2. **Disable Helmet Registration:**  
+   In [`server.js`](server.js), comment out or remove the registration of `helmet`.
 
-3. For production:
 
-   Use the docker image which uses nginx for best performance and small bundle size.
-   `docker build -t my-label .`
+### Build & Production
+
+#### Build the Application
+
+```bash
+npm run build
+```
+
+#### Serve the Production Build Locally
+
+```bash
+npm run preview
+```
+
+#### Production Deployment
+
+Use the docker image which uses nginx for best performance and small bundle size.
+
+```bash
+docker build -t my-label .
+```
 
 ### Dynamic FrontendConfig
 
@@ -50,11 +78,11 @@ An example docker run command would be
 docker run -p 5001:80 -e BACKEND_CONFIG="$(cat frontend-config.json)"  -t ui-test
 ```
 
-## Support, Feedback, Contributing
+## Support & Contributing
 
 This project is open to feature requests/suggestions, bug reports etc. via [GitHub issues](https://github.com/openmcp-project/ui-frontend/issues). Contribution and feedback are encouraged and always welcome. For more information about how to contribute, the project structure, as well as additional contribution information, see our [Contribution Guidelines](CONTRIBUTING.md).
 
-## Security / Disclosure
+## Security & Disclosure
 If you find any bug that may be a security problem, please follow our instructions at [in our security policy](https://github.com/openmcp-project/ui-frontend/security/policy) on how to report it. Please do not create GitHub issues for security-related doubts or problems.
 
 ## Code of Conduct
@@ -64,3 +92,7 @@ We as members, contributors, and leaders pledge to make participation in our com
 ## Licensing
 
 Copyright 2025 SAP SE or an SAP affiliate company and ui-frontend contributors. Please see our [LICENSE](LICENSE) for copyright and license information. Detailed information including third-party components and their licensing/copyright information is available [via the REUSE tool](https://api.reuse.software/info/github.com/openmcp-project/ui-frontend).
+
+---
+
+**Happy contributing! 🚀**

index.html

@@ -8,13 +8,9 @@
   <title>MCP</title>
 </head>
 
-<script>
-  window.global ||= window;
-</script>
-
 <body>
   <div id="root"></div>
   <script type="module" src="/src/mount.ts"></script>
 </body>
 
-</html>
+</html>