dev(front): enable live reload for front service in local development (#441)

radwo · web-flow · commit 654dbcf358ff · 2025-07-31T11:22:24.000Z
- Remove entr file watching in favor of LiveReload
- Enable distributed node for clustering in local development
- Move hardcoded internal APIs from dev config to docker compose
- Remove CORS headers blocking LiveReload websockets
- Enable websocket upgrades for LiveReload in ingress

## 📝 Description
&lt;!-- Describe your changes in detail --&gt;

## ✅ Checklist
- [x] I have tested this change
- [x] ~This change requires documentation update~
diff --git a/front/Dockerfile b/front/Dockerfile
@@ -56,15 +56,15 @@ COPY front/assets ./
 FROM elixir AS dev
 WORKDIR /app
 RUN apk update \
-    && apk add --no-cache chromium-chromedriver inotify-tools bash gnupg entr
+    && apk add --no-cache chromium-chromedriver inotify-tools bash gnupg
 
 COPY --from=elixir /elixir ./
 COPY --from=node /assets ./assets
 WORKDIR /app/assets
 RUN node build.js
 WORKDIR /app
 
-CMD ["sh", "-c", "find lib config | entr -n -r mix phx.server"]
+CMD ["sh", "-c", "elixir --name front@127.0.0.1 --cookie mycookie -S mix phx.server"]
 # -- dev stage
 
 # -- builder stage - build artifacts are created here
diff --git a/front/Makefile b/front/Makefile
@@ -29,6 +29,11 @@ CACHE_PORT=6379
 CACHE_POOL_SIZE=5
 AMQP_URL=amqp://0.0.0.0:5672
 
+#
+# Internal API URLs env file
+#
+INTERNAL_API_ENV_FILE = env/.env.internal-apis
+
 CONTAINER_ENV_VARS = \
 	-e CI=$(CI) \
 	-e MIX_ENV=$(MIX_ENV) \
@@ -42,7 +47,8 @@ CONTAINER_ENV_VARS = \
 	-e SEED_PROJECTS="initializing_failed,zebra,guard,errored,test_results,test_results_debug,after_pipeline,bitbucket" \
 	-e SEED_CLOUD_MACHINES=true \
 	-e SECRET_KEY_BASE="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure" \
-	-e SESSION_SIGNING_SALT="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure"
+	-e SESSION_SIGNING_SALT="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure" \
+	--env-file $(INTERNAL_API_ENV_FILE)
 
 
 CONTAINER_CE_ENV_VARS =\
@@ -55,7 +61,8 @@ CONTAINER_CE_ENV_VARS =\
 	 -e WORKFLOW_TEMPLATES_YAMLS_PATH="/app/workflow_templates/ce" \
 	 -e EXCLUDE_STUBS="GoferMock" \
 	 -e SECRET_KEY_BASE="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure" \
-	 -e SESSION_SIGNING_SALT="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure"
+	 -e SESSION_SIGNING_SALT="keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure" \
+	 --env-file $(INTERNAL_API_ENV_FILE)
 
 test.ex.setup: export MIX_ENV=test
 test.ex.setup:
diff --git a/front/config/dev.exs b/front/config/dev.exs
@@ -21,7 +21,8 @@ config :front, FrontWeb.Endpoint,
       ~r{lib/front_web/views/.*(ex)$},
       ~r{lib/front_web/templates/.*(eex)$},
       ~r{assets/js/.*(ts|tsx|js)$}
-    ]
+    ],
+    web_console_logger: true
   ]
 
 # Do not include metadata nor timestamps in development logs
@@ -30,48 +31,9 @@ config :logger, :console, format: "[$level] $message\n"
 config :phoenix, :stacktrace_depth, 20
 
 config :front,
-  cookie_name: "_semaphoreappdotcom_dev_session",
-  # API endpoints
-  artifacthub_api_grpc_endpoint: "127.0.0.1:50052",
-  audit_grpc_endpoint: "127.0.0.1:50052",
-  authentication_grpc_endpoint: "127.0.0.1:50051",
-  billing_api_grpc_endpoint: "127.0.0.1:50052",
-  branch_api_grpc_endpoint: "127.0.0.1:50052",
-  dashboard_api_grpc_endpoint: "127.0.0.1:50052",
-  feature_grpc_endpoint: "127.0.0.1:50052",
-  gofer_grpc_endpoint: "127.0.0.1:50052",
-  guard_grpc_endpoint: "127.0.0.1:50052",
-  guard_user_grpc_endpoint: "127.0.0.1:50052",
-  instance_config_grpc_endpoint: "127.0.0.1:50052",
-  job_api_grpc_endpoint: "127.0.0.1:50052",
-  loghub2_api_grpc_endpoint: "127.0.0.1:50051",
-  loghub_api_grpc_endpoint: "127.0.0.1:50051",
-  notification_api_grpc_endpoint: "127.0.0.1:50052",
-  okta_grpc_endpoint: "127.0.0.1:50052",
-  organization_api_grpc_endpoint: "127.0.0.1:50052",
-  periodic_scheduler_grpc_endpoint: "127.0.0.1:50052",
-  permission_patrol_grpc_endpoint: "127.0.0.1:50052",
-  pipeline_api_grpc_endpoint: "127.0.0.1:50052",
-  ppl_grpc_endpoint: "127.0.0.1:50051",
-  pre_flight_checks_grpc_endpoint: "127.0.0.1:50052",
-  projecthub_grpc_endpoint: "127.0.0.1:50052",
-  rbac_grpc_endpoint: "127.0.0.1:50052",
-  groups_grpc_endpoint: "127.0.0.1:50052",
-  repo_proxy_grpc_endpoint: "127.0.0.1:50051",
-  repohub_grpc_endpoint: "127.0.0.1:50052",
-  repository_integrator_grpc_endpoint: "127.0.0.1:50052",
-  repositoryhub_grpc_endpoint: "127.0.0.1:50052",
-  scouter_grpc_endpoint: "127.0.0.1:50052",
-  secrets_api_grpc_endpoint: "127.0.0.1:50052",
-  self_hosted_agents_grpc_endpoint: "127.0.0.1:50052",
-  superjerry_grpc_endpoint: "127.0.0.1:50051",
-  task_grpc_endpoint: "127.0.0.1:50052",
-  velocity_grpc_endpoint: "127.0.0.1:50052",
-  workflow_api_grpc_endpoint: "127.0.0.1:50052",
-  jwt_grpc_endpoint: "127.0.0.1:50052",
-  license_grpc_endpoint: "127.0.0.1:50052"
+  cookie_name: "_semaphoreappdotcom_dev_session"
 
-config :front, domain: "semaphoredev.dev"
+config :front, domain: System.get_env("BASE_DOMAIN") || "semaphoredev.dev"
 config :front, me_host: nil, me_path: "/me"
 config :front, docs_domain: "docs.semaphoredev.dev"
 config :front, guard_grpc_timeout: 1_000
diff --git a/front/config/runtime.exs b/front/config/runtime.exs
@@ -55,11 +55,57 @@ config :front,
   cache_pool_size: elem(Integer.parse(System.get_env("CACHE_POOL_SIZE") || "5"), 0),
   github_app_url: System.get_env("GITHUB_APPLICATION_URL"),
   cookie_name: System.get_env("COOKIE_NAME"),
-  branch_api_grpc_endpoint: System.get_env("BRANCH_GRPC_URL") || "127.0.0.1:50052",
   use_rbac_api: if(System.get_env("USE_RBAC_API") == "true", do: true, else: false)
 
 on_prem? = if(System.get_env("ON_PREM") == "true", do: true, else: false)
 
+# Internal API endpoints - always read from environment variables for all environments
+# Test environment will need these env vars set, or use stubs in test setup
+config :front,
+  artifacthub_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_ARTIFACTHUB"),
+  audit_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_AUDIT"),
+  authentication_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_AUTHENTICATION"),
+  billing_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_BILLING"),
+  branch_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_BRANCH"),
+  dashboard_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_DASHBOARDHUB"),
+  feature_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_FEATURE"),
+  guard_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_GUARD"),
+  guard_user_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_USER"),
+  hooks_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_HOOKS"),
+  instance_config_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_INSTANCE_CONFIG"),
+  job_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_JOB"),
+  loghub2_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_LOGHUB2"),
+  notification_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_NOTIFICATION"),
+  okta_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_OKTA"),
+  organization_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_ORGANIZATION"),
+  periodic_scheduler_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SCHEDULER"),
+  pipeline_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
+  ppl_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
+  pre_flight_checks_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PFC"),
+  projecthub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PROJECT"),
+  rbac_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_RBAC"),
+  repo_proxy_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPO_PROXY"),
+  repohub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPOHUB"),
+  repository_integrator_grpc_endpoint:
+    System.fetch_env!("INTERNAL_API_URL_REPOSITORY_INTEGRATOR"),
+  repositoryhub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPOSITORY"),
+  scouter_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SCOUTER"),
+  # sobelow_skip ["Config.Secrets"]
+  secrets_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SECRETHUB"),
+  self_hosted_agents_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SELFHOSTEDHUB"),
+  superjerry_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SUPERJERRY"),
+  task_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_TASK"),
+  velocity_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_VELOCITY"),
+  workflow_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
+  jwt_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SECRETHUB"),
+  permission_patrol_grpc_endpoint: "127.0.0.1:50052"
+
+config :front,
+  license_grpc_endpoint: System.get_env("INTERNAL_API_URL_LICENSE_CHECKER"),
+  gofer_grpc_endpoint: System.get_env("INTERNAL_API_URL_GOFER"),
+  groups_grpc_endpoint: System.get_env("INTERNAL_API_URL_GROUPS"),
+  loghub_api_grpc_endpoint: System.get_env("INTERNAL_API_URL_LOGHUB")
+
 if config_env() == :prod do
   config :logger, level: (System.get_env("LOG_LEVEL") || "info") |> String.to_atom()
   config :front, docs_domain: System.get_env("DOCS_DOMAIN", "docs.semaphoreci.com")
@@ -75,51 +121,6 @@ if config_env() == :prod do
   config :front,
     support_app_id: System.get_env("HELPSCOUT_APP_ID"),
     support_app_secret: System.get_env("HELPSCOUT_APP_SECRET")
-
-  config :front,
-    artifacthub_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_ARTIFACTHUB"),
-    audit_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_AUDIT"),
-    authentication_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_AUTHENTICATION"),
-    billing_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_BILLING"),
-    branch_api_grpc_endpoint: System.get_env("INTERNAL_API_URL_BRANCH"),
-    dashboard_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_DASHBOARDHUB"),
-    feature_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_FEATURE"),
-    guard_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_GUARD"),
-    guard_user_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_USER"),
-    hooks_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_HOOKS"),
-    instance_config_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_INSTANCE_CONFIG"),
-    job_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_JOB"),
-    loghub2_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_LOGHUB2"),
-    notification_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_NOTIFICATION"),
-    okta_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_OKTA"),
-    organization_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_ORGANIZATION"),
-    periodic_scheduler_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SCHEDULER"),
-    permission_patrol_grpc_endpoint: "127.0.0.1:50052",
-    pipeline_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
-    ppl_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
-    pre_flight_checks_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PFC"),
-    projecthub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PROJECT"),
-    rbac_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_RBAC"),
-    repo_proxy_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPO_PROXY"),
-    repohub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPOHUB"),
-    repository_integrator_grpc_endpoint:
-      System.fetch_env!("INTERNAL_API_URL_REPOSITORY_INTEGRATOR"),
-    repositoryhub_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_REPOSITORY"),
-    scouter_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SCOUTER"),
-    # sobelow_skip ["Config.Secrets"]
-    secrets_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SECRETHUB"),
-    self_hosted_agents_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SELFHOSTEDHUB"),
-    superjerry_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SUPERJERRY"),
-    task_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_TASK"),
-    velocity_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_VELOCITY"),
-    workflow_api_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_PLUMBER"),
-    jwt_grpc_endpoint: System.fetch_env!("INTERNAL_API_URL_SECRETHUB"),
-    license_grpc_endpoint: System.get_env("INTERNAL_API_URL_LICENSE", "license-checker:50051")
-
-  config :front,
-    gofer_grpc_endpoint: System.get_env("INTERNAL_API_URL_GOFER"),
-    groups_grpc_endpoint: System.get_env("INTERNAL_API_URL_GROUPS"),
-    loghub_api_grpc_endpoint: System.get_env("INTERNAL_API_URL_LOGHUB")
 end
 
 config :front,
diff --git a/front/config/test.exs b/front/config/test.exs
@@ -12,45 +12,7 @@ config :logger, :console,
   format: {Support.Logger, :format},
   metadata: [:file, :line, :inspect]
 
-config :front,
-  artifacthub_api_grpc_endpoint: "127.0.0.1:50052",
-  audit_grpc_endpoint: "127.0.0.1:50052",
-  authentication_grpc_endpoint: "127.0.0.1:50051",
-  billing_api_grpc_endpoint: "127.0.0.1:50052",
-  branch_api_grpc_endpoint: "127.0.0.1:50052",
-  dashboard_api_grpc_endpoint: "127.0.0.1:50052",
-  feature_grpc_endpoint: "127.0.0.1:50052",
-  gofer_grpc_endpoint: "127.0.0.1:50052",
-  guard_grpc_endpoint: "127.0.0.1:50052",
-  guard_user_grpc_endpoint: "127.0.0.1:50052",
-  instance_config_grpc_endpoint: "127.0.0.1:50052",
-  job_api_grpc_endpoint: "127.0.0.1:50052",
-  loghub_api_grpc_endpoint: "127.0.0.1:50051",
-  notification_api_grpc_endpoint: "127.0.0.1:50052",
-  okta_grpc_endpoint: "127.0.0.1:50052",
-  organization_api_grpc_endpoint: "127.0.0.1:50052",
-  periodic_scheduler_grpc_endpoint: "127.0.0.1:50052",
-  permission_patrol_grpc_endpoint: "127.0.0.1:50052",
-  pipeline_api_grpc_endpoint: "127.0.0.1:50052",
-  ppl_grpc_endpoint: "127.0.0.1:50051",
-  pre_flight_checks_grpc_endpoint: "127.0.0.1:50052",
-  projecthub_grpc_endpoint: "127.0.0.1:50052",
-  rbac_grpc_endpoint: "127.0.0.1:50052",
-  groups_grpc_endpoint: "127.0.0.1:50052",
-  repo_proxy_grpc_endpoint: "127.0.0.1:50051",
-  repohub_grpc_endpoint: "127.0.0.1:50052",
-  repository_integrator_grpc_endpoint: "127.0.0.1:50052",
-  repositoryhub_grpc_endpoint: "127.0.0.1:50052",
-  scouter_grpc_endpoint: "127.0.0.1:50052",
-  secrets_api_grpc_endpoint: "127.0.0.1:50052",
-  self_hosted_agents_grpc_endpoint: "127.0.0.1:50052",
-  superjerry_grpc_endpoint: "127.0.0.1:50051",
-  task_grpc_endpoint: "127.0.0.1:50052",
-  usage_grpc_endpoint: "127.0.0.1:50052",
-  velocity_grpc_endpoint: "127.0.0.1:50052",
-  workflow_api_grpc_endpoint: "127.0.0.1:50052",
-  jwt_grpc_endpoint: "127.0.0.1:50052",
-  license_grpc_endpoint: "127.0.0.1:50052"
+# Internal API endpoints configuration removed - now handled in runtime.exs
 
 config :front,
   domain: "semaphoretest.test",
diff --git a/front/docker-compose.yml b/front/docker-compose.yml
@@ -34,6 +34,9 @@ services:
       SECRET_KEY_BASE: "keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure"
       SESSION_SIGNING_SALT: "keyboard-cat-please-use-this-only-for-dev-and-testing-it-is-insecure"
 
+    env_file:
+      - ./env/.env.internal-apis
+
     links:
       - redis-cache:redis-cache
       - rabbitmq:rabbitmq
diff --git a/front/env/.env.internal-apis b/front/env/.env.internal-apis
@@ -0,0 +1,38 @@
+# Internal API URLs
+INTERNAL_API_URL_ARTIFACTHUB=127.0.0.1:50052
+INTERNAL_API_URL_AUDIT=127.0.0.1:50052
+INTERNAL_API_URL_AUTHENTICATION=127.0.0.1:50051
+INTERNAL_API_URL_BILLING=127.0.0.1:50052
+INTERNAL_API_URL_BRANCH=127.0.0.1:50052
+INTERNAL_API_URL_DASHBOARDHUB=127.0.0.1:50052
+INTERNAL_API_URL_FEATURE=127.0.0.1:50052
+INTERNAL_API_URL_GUARD=127.0.0.1:50052
+INTERNAL_API_URL_USER=127.0.0.1:50052
+INTERNAL_API_URL_HOOKS=127.0.0.1:50052
+INTERNAL_API_URL_INSTANCE_CONFIG=127.0.0.1:50052
+INTERNAL_API_URL_JOB=127.0.0.1:50052
+INTERNAL_API_URL_LOGHUB2=127.0.0.1:50051
+INTERNAL_API_URL_NOTIFICATION=127.0.0.1:50052
+INTERNAL_API_URL_OKTA=127.0.0.1:50052
+INTERNAL_API_URL_ORGANIZATION=127.0.0.1:50052
+INTERNAL_API_URL_SCHEDULER=127.0.0.1:50052
+INTERNAL_API_URL_PERMISSION_PATROL=127.0.0.1:50052
+INTERNAL_API_URL_PLUMBER=127.0.0.1:50052
+INTERNAL_API_URL_PFC=127.0.0.1:50052
+INTERNAL_API_URL_PROJECT=127.0.0.1:50052
+INTERNAL_API_URL_RBAC=127.0.0.1:50052
+INTERNAL_API_URL_REPO_PROXY=127.0.0.1:50051
+INTERNAL_API_URL_REPOHUB=127.0.0.1:50052
+INTERNAL_API_URL_REPOSITORY_INTEGRATOR=127.0.0.1:50052
+INTERNAL_API_URL_REPOSITORY=127.0.0.1:50052
+INTERNAL_API_URL_SCOUTER=127.0.0.1:50052
+INTERNAL_API_URL_SECRETHUB=127.0.0.1:50052
+INTERNAL_API_URL_SELFHOSTEDHUB=127.0.0.1:50052
+INTERNAL_API_URL_SUPERJERRY=127.0.0.1:50051
+INTERNAL_API_URL_TASK=127.0.0.1:50052
+INTERNAL_API_URL_VELOCITY=127.0.0.1:50052
+INTERNAL_API_URL_LICENSE=127.0.0.1:50052
+INTERNAL_API_URL_GOFER=127.0.0.1:50052
+INTERNAL_API_URL_GROUPS=127.0.0.1:50052
+INTERNAL_API_URL_LOGHUB=127.0.0.1:50051
+INTERNAL_API_URL_LICENSE_CHECKER=127.0.0.1:50052
diff --git a/front/helm/templates/job-page.yaml b/front/helm/templates/job-page.yaml
@@ -65,7 +65,7 @@ spec:
           securityContext:
             privileged: false
             allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem | default true }}
+            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem }}
             capabilities:
               drop:
                 - ALL
@@ -154,11 +154,6 @@ spec:
                 secretKeyRef:
                   name: {{ .Values.global.redis.secretName }}
                   key: port
-            - name: BRANCH_GRPC_URL
-              valueFrom:
-                configMapKeyRef:
-                  name: {{ .Values.global.internalApi.configMapName }}
-                  key: INTERNAL_API_URL_BRANCH
 
           startupProbe:
             httpGet:
diff --git a/front/helm/templates/project-page.yaml b/front/helm/templates/project-page.yaml
@@ -91,7 +91,7 @@ spec:
           securityContext:
             privileged: false
             allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem | default true }}
+            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem }}
             capabilities:
               drop:
                 - ALL
diff --git a/front/helm/templates/ui-cache-reactor.yaml b/front/helm/templates/ui-cache-reactor.yaml
@@ -45,7 +45,7 @@ spec:
           securityContext:
             privileged: false
             allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem | default true }}
+            readOnlyRootFilesystem: {{ not .Values.global.development.writableRootFilesystem }}
             capabilities:
               drop:
                 - ALL
diff --git a/front/mix.lock b/front/mix.lock
diff --git a/helm-chart/templates/configmaps/internal-api-urls.yaml b/helm-chart/templates/configmaps/internal-api-urls.yaml
diff --git a/helm-chart/templates/emissary-ingress/mappings.yaml b/helm-chart/templates/emissary-ingress/mappings.yaml
diff --git a/skaffold.yaml b/skaffold.yaml
