fix security context

ai-cfia · Nov 20, 2024 · a3f2fff · a3f2fff
1 parent aebbdbf
commit a3f2fff
Showing 1 changed file with 4 additions and 10 deletions.
diff --git a/kubernetes/aks/apps/nachet/base/nachet-rcnn-model-deployment.yaml b/kubernetes/aks/apps/nachet/base/nachet-rcnn-model-deployment.yaml
@@ -19,15 +19,6 @@ spec:
       labels:
         app: nachet-rcnn-detector
     spec:
-      securityContext:
-        runAsNonRoot: false
-        runAsUser: 1000
-        runAsGroup: 1000
-        readOnlyRootFilesystem: false
-        allowPrivilegeEscalation: false
-        capabilities:
-          drop:
-            - ALL
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
@@ -76,7 +67,10 @@ spec:
               cpu: "500m"
               memory: "2Gi"
           securityContext:
-            readOnlyRootFilesystem: true
+            runAsNonRoot: false
+            runAsUser: 1000
+            runAsGroup: 1000
+            readOnlyRootFilesystem: false
             allowPrivilegeEscalation: false
             capabilities:
               drop: