From b11f26b9634e96cd113ac2a444582fa60fefa5e3 Mon Sep 17 00:00:00 2001
From: Andrew Stoltz <1578013+astoltz@users.noreply.github.com>
Date: Wed, 17 Jun 2026 04:08:23 -0500
Subject: [PATCH] deploy(mysql): roll non-root GX10 web image

---
 apps-gx10/fc-mysql/deployment-mysql-web.json | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/apps-gx10/fc-mysql/deployment-mysql-web.json b/apps-gx10/fc-mysql/deployment-mysql-web.json
index 197bebf..0ef0528 100644
--- a/apps-gx10/fc-mysql/deployment-mysql-web.json
+++ b/apps-gx10/fc-mysql/deployment-mysql-web.json
@@ -76,7 +76,7 @@
                 "value": "mysql"
               }
             ],
-            "image": "localhost/fc-mysql-web:gx10-v1",
+            "image": "localhost/fc-mysql-web:v20260617-sec5-1148fd0",
             "imagePullPolicy": "Never",
             "livenessProbe": {
               "failureThreshold": 3,
@@ -172,8 +172,9 @@
         "restartPolicy": "Always",
         "schedulerName": "default-scheduler",
         "securityContext": {
-          "fsGroup": 1654,
-          "runAsGroup": 1654,
+          "fsGroup": 1654,
+          "fsGroupChangePolicy": "OnRootMismatch",
+          "runAsGroup": 1654,
           "runAsNonRoot": true,
           "runAsUser": 1654
         },