From 288715f0c19895e8eae90ca586050f2571999a22 Mon Sep 17 00:00:00 2001
From: ytshih <ytshih@konchin.com>
Date: Wed, 23 Oct 2024 18:03:56 +0000
Subject: [PATCH] Fix: securityContext

---
 k8s/deploy.rickroll.yaml | 7 ++++++-
 k8s/svc.rickroll.yaml    | 2 +-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/k8s/deploy.rickroll.yaml b/k8s/deploy.rickroll.yaml
index 68f1a56..b4e0924 100644
--- a/k8s/deploy.rickroll.yaml
+++ b/k8s/deploy.rickroll.yaml
@@ -18,12 +18,17 @@ spec:
     spec:
       containers:
       - name: server
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 1000
         image: gitea.konchin.com/service/rickroll:latest
         ports:
           - name: http
-            containerPort: 80
+            containerPort: 8080
         env:
           - name: URI
             value: https://youtu.be/dQw4w9WgXcQ
+          - name: PORT
+            value: '8080'
       imagePullSecrets:
       - name: regcred
diff --git a/k8s/svc.rickroll.yaml b/k8s/svc.rickroll.yaml
index 640decc..08d23f8 100644
--- a/k8s/svc.rickroll.yaml
+++ b/k8s/svc.rickroll.yaml
@@ -13,4 +13,4 @@ spec:
   ports:
   - name: http
     port: 80
-    targetPort: 80
+    targetPort: 8080