fix(deploy): align runtime identity and ingress

2026-08-29 06:52:32 +00:00
parent cd552a8b04
commit 50dce9eaf7
8 changed files with 27 additions and 18 deletions
@@ -27,6 +27,10 @@ spec:
      terminationGracePeriodSeconds: 30
      securityContext:
        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
        seccompProfile:
          type: RuntimeDefault
      containers:
@@ -4,15 +4,8 @@ metadata:
  name: buzz-sheet
  labels:
    app.kubernetes.io/name: buzz-sheet
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
 spec:
  ingressClassName: traefik
-  tls:
-    - hosts:
-        - sheet.sudloh.com
-      secretName: sheet-sudloh-com-tls
  rules:
    - host: sheet.sudloh.com
      http:
@@ -27,6 +27,10 @@ spec:
      terminationGracePeriodSeconds: 35
      securityContext:
        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
        seccompProfile:
          type: RuntimeDefault
      containers:
@@ -19,6 +19,10 @@ spec:
      automountServiceAccountToken: false
      securityContext:
        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
        seccompProfile:
          type: RuntimeDefault
      containers: