Merge pull request 'Fix Neuron MCP routing and security' (#11) from fix/neuron-mcp into main

2026-04-26 06:35:41 +00:00
parent cd57a7b789 01245a6278
commit 4137fb556b
2 changed files with 7 additions and 3 deletions
@@ -13,8 +13,9 @@ spec:
      hosts:
        - neurontechnologies.ai
        - www.neurontechnologies.ai
+        - neuron.neurontechnologies.ai
  rules:
-    - host: neurontechnologies.ai
+    - host: neuron.neurontechnologies.ai
      http:
        paths:
          - path: /mcp
@@ -66,6 +67,9 @@ spec:
                name: neuron-mcp
                port:
                  number: 8080
+    - host: neurontechnologies.ai
+      http:
+        paths:
          - path: /license
            pathType: Prefix
            backend:
@@ -21,12 +21,11 @@ spec:
        app: neuron-mcp
        slot: blue
        env: prod
-      annotations:
-        kubectl.kubernetes.io/restartedAt: "2026-04-25T08:40:00Z"
    spec:
      terminationGracePeriodSeconds: 30
      securityContext:
        runAsNonRoot: true
+        runAsUser: 1000
        seccompProfile:
          type: RuntimeDefault
      containers:
@@ -40,6 +39,7 @@ spec:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: false  # JVM writes temp files; restrict paths via allowedPaths once profiled
            runAsNonRoot: true
+            runAsUser: 1000
            capabilities:
              drop: ["ALL"]
          env: