deploy(segmentdisplay): roll non-root GX10 image

apps-gx10/fc-segmentdisplay/deployment-segmentdisplay-web.json

@@ -49,7 +49,7 @@
                 }
               }
             ],
-            "image": "localhost/fc-segmentdisplay-web:gx10-v1",
+            "image": "localhost/fc-segmentdisplay-web:v20260617-sec5-segmentdisplay-7730fb2",
             "imagePullPolicy": "Never",
             "livenessProbe": {
               "failureThreshold": 3,
@@ -84,12 +84,32 @@
               "timeoutSeconds": 5
             },
             "resources": {},
+            "securityContext": {
+              "allowPrivilegeEscalation": false,
+              "capabilities": {
+                "drop": [
+                  "ALL"
+                ]
+              },
+              "readOnlyRootFilesystem": true,
+              "runAsGroup": 1654,
+              "runAsNonRoot": true,
+              "runAsUser": 1654
+            },
             "terminationMessagePath": "/dev/termination-log",
             "terminationMessagePolicy": "File",
             "volumeMounts": [
               {
                 "mountPath": "/data",
                 "name": "data"
+              },
+              {
+                "mountPath": "/tmp",
+                "name": "tmp"
+              },
+              {
+                "mountPath": "/app/logs",
+                "name": "logs"
               }
             ]
           }
@@ -97,7 +117,13 @@
         "dnsPolicy": "ClusterFirst",
         "restartPolicy": "Always",
         "schedulerName": "default-scheduler",
-        "securityContext": {},
+        "securityContext": {
+          "fsGroup": 1654,
+          "fsGroupChangePolicy": "OnRootMismatch",
+          "runAsGroup": 1654,
+          "runAsNonRoot": true,
+          "runAsUser": 1654
+        },
         "terminationGracePeriodSeconds": 30,
         "volumes": [
           {
@@ -105,6 +131,14 @@
             "persistentVolumeClaim": {
               "claimName": "segmentdisplay-web-data"
             }
+          },
+          {
+            "emptyDir": {},
+            "name": "tmp"
+          },
+          {
+            "emptyDir": {},
+            "name": "logs"
           }
         ]
       }