[Timesketch] Implement direct static file serving and tune Nginx proxy buffers

[jaegeral]

This change optimizes how Timesketch frontend assets are served to resolve Nginx warnings regarding
upstream responses being buffered to disk. By offloading static file delivery from the Python
application server (Gunicorn) to Nginx, we reduce latency and CPU overhead on the backend.

Note: This PR received lots of help by Gemini

[jaegeral]

------------------------------------------------------------------------------------------------------------------------
 Charts to be processed:
------------------------------------------------------------------------------------------------------------------------
 osdfir-infrastructure => (version: "2.7.7", path: "charts/osdfir-infrastructure")
------------------------------------------------------------------------------------------------------------------------

"osdfir-charts" has been added to your repositories
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "osdfir-charts" chart repository
Update Complete. ⎈Happy Helming!⎈
Saving 5 charts
Deleting outdated charts
Linting chart "osdfir-infrastructure => (version: \"2.7.7\", path: \"charts/osdfir-infrastructure\")"
Checking chart "osdfir-infrastructure => (version: \"2.7.7\", path: \"charts/osdfir-infrastructure\")" for a version bump...
Old chart version: 2.7.7
Error: failed linting charts: failed processing charts
New chart version: 2.7.7
------------------------------------------------------------------------------------------------------------------------
 ✖︎ osdfir-infrastructure => (version: "2.7.7", path: "charts/osdfir-infrastructure") > chart version not ok. Needs a version bump! 
------------------------------------------------------------------------------------------------------------------------
failed linting charts: failed processing charts

Do I need to bump the version here?

[wajihyassine]

Thank you for this @jaegeral !

This looks pretty good, to update the version can you

• https://github.com/google/osdfir-infrastructure/blob/main/charts/osdfir-infrastructure/charts/timesketch/Chart.yaml#L3
• s/2.4.5/2.4.6
• Then go to https://github.com/google/osdfir-infrastructure/blob/main/charts/osdfir-infrastructure/Chart.yaml#L17
• s/2.4.5/2.4.6
• Lastly run helm dep update and then check in the update Chart.yaml files and Chart.lock file

That will fix the failing test above. There will be a final GH action that runs when thats fixed to make sure the helm chart can install properly.

Did you by chance run these changes locally and were able to upload a Timesketch timeline w/o the issues you were seeing?

[jaegeral]

No I was not testing it locally so far, but I will test it and update the things you mentioned 👍

[wajihyassine]

Sweet thank you. To help you with any troubleshooting, here are some commands that might be useful:

• To exec into nginx pod kubectl exec -it <nginx-pod-name> -- /bin/sh
• To check init container logs kubectl logs <nginx-pod-name> -c init-static or main pod logs is just kubectl logs <nginx-pod-name>