cluster

commit 2532f00fb2ca893da62af713848197a30f35dfc7
parent 6e9e5234e98e8f7a6694af2074add224176a6c45
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 31 Mar 2025 23:31:53 +0200

Prepare monitoring element.io

Diffstat:
M
apps/base/element_changedetection/element_deployment.yaml
 | 
16
++++++++++------

1 file changed, 10 insertions(+), 6 deletions(-)
diff --git a/apps/base/element_changedetection/element_deployment.yaml b/apps/base/element_changedetection/element_deployment.yaml
@@ -31,6 +31,10 @@ spec:
             labels:
                 app: element-changedetection
         spec:
+            securityContext:
+                fsGroup: 911
+                runAsUser: 911
+                runAsGroup: 911
             containers:
                 - image: archivebox/sonic:latest
                   imagePullPolicy: Always
@@ -57,8 +61,8 @@ spec:
                               - ALL
                           #add:
                           #    - SYS_ADMIN
-                      readOnlyRootFilesystem: false
-                      runAsNonRoot: false
+                      readOnlyRootFilesystem: true
+                      runAsNonRoot: true
                   volumeMounts:
                       - mountPath: /var/lib/sonic/store
                         name: element-changedetection-data
@@ -101,8 +105,8 @@ spec:
                               - ALL
                           add:
                               - CHOWN
-                      readOnlyRootFilesystem: false
-                      runAsNonRoot: false
+                      readOnlyRootFilesystem: true
+                      runAsNonRoot: true
                   volumeMounts:
                       - mountPath: /data
                         name: element-changedetection-data
@@ -158,8 +162,8 @@ spec:
                               - ALL
                           add:
                               - CHOWN
-                      readOnlyRootFilesystem: false
-                      runAsNonRoot: false
+                      readOnlyRootFilesystem: true
+                      runAsNonRoot: true
                   volumeMounts:
                       - mountPath: /data
                         name: element-changedetection-data