diff --git a/apps-gx10/fc-updater/deployment-updatecenter-web.json b/apps-gx10/fc-updater/deployment-updatecenter-web.json index e4c3524..b857454 100644 --- a/apps-gx10/fc-updater/deployment-updatecenter-web.json +++ b/apps-gx10/fc-updater/deployment-updatecenter-web.json @@ -195,9 +195,17 @@ "value": "26843545600" } ], - "image": "localhost/fc-updater-web:gx10-v1", - "imagePullPolicy": "Never", - "livenessProbe": { + "image": "localhost/fc-updater-web:v20260617-sec5-913c6a9", + "imagePullPolicy": "Never", + "securityContext": { + "allowPrivilegeEscalation": false, + "capabilities": { + "drop": [ + "ALL" + ] + } + }, + "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 30, @@ -244,7 +252,13 @@ "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", - "securityContext": {}, + "securityContext": { + "fsGroup": 1654, + "fsGroupChangePolicy": "OnRootMismatch", + "runAsGroup": 1654, + "runAsNonRoot": true, + "runAsUser": 1654 + }, "terminationGracePeriodSeconds": 30, "volumes": [ {