462 nachet detector security context (#472)

ai-cfia · Nov 20, 2024 · 449ba4b · 449ba4b
1 parent d466437
commit 449ba4b
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/kubernetes/aks/apps/nachet/base/nachet-rcnn-model-deployment.yaml b/kubernetes/aks/apps/nachet/base/nachet-rcnn-model-deployment.yaml
@@ -20,10 +20,14 @@ spec:
         app: nachet-rcnn-detector
     spec:
       securityContext:
-        runAsNonRoot: true
+        runAsNonRoot: false
         runAsUser: 1000
-        runAsGroup: 3000
-        fsGroup: 2000
+        runAsGroup: 1000
+        readOnlyRootFilesystem: false
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution: