From b2940c70e044cbd717aba05406a2abb756845de0 Mon Sep 17 00:00:00 2001
From: Will Anderson <will.anderson@neurontechnologies.ai>
Date: Mon, 27 Apr 2026 05:13:50 +0000
Subject: [PATCH] fix(swarm): add runAsUser: 1001 to all swarm containers (#44)

---
 .../legion/k8s/neuron-technologies/prod/backup-cronjob.yaml | 6 ++++--
 .../k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml | 1 +
 .../k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml  | 1 +
 .../k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml | 1 +
 .../neuron-technologies/swarm/rest-deployment-alpha.yaml    | 1 +
 .../k8s/neuron-technologies/swarm/rest-deployment-beta.yaml | 1 +
 .../neuron-technologies/swarm/rest-deployment-gamma.yaml    | 1 +
 7 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/servers/legion/k8s/neuron-technologies/prod/backup-cronjob.yaml b/servers/legion/k8s/neuron-technologies/prod/backup-cronjob.yaml
index 2e31aa3..650da23 100644
--- a/servers/legion/k8s/neuron-technologies/prod/backup-cronjob.yaml
+++ b/servers/legion/k8s/neuron-technologies/prod/backup-cronjob.yaml
@@ -82,7 +82,8 @@ spec:
                   restic snapshots 2>/dev/null || restic init
 
                   restic backup \
-                    /data/neuron-prod.db \
+                    /data/neuron.db \
+                    /data/mcp-sessions.db \
                     --tag neuron-prod \
                     --host legion \
                     --exclude '*.db-shm' \
@@ -110,7 +111,8 @@ spec:
                     restic snapshots 2>/dev/null || restic init
 
                     restic backup \
-                      /data/neuron-prod.db \
+                      /data/neuron.db \
+                      /data/mcp-sessions.db \
                       --tag neuron-prod \
                       --host legion \
                       --exclude '*.db-shm' \
diff --git a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml
index 7fd8263..034ce82 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml
@@ -35,6 +35,7 @@ spec:
               mountPath: /data
           securityContext:
             runAsNonRoot: true
+            runAsUser: 1001
             allowPrivilegeEscalation: false
             capabilities:
               drop: ["ALL"]
diff --git a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml
index c6d6cca..92e526c 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml
@@ -35,6 +35,7 @@ spec:
               mountPath: /data
           securityContext:
             runAsNonRoot: true
+            runAsUser: 1001
             allowPrivilegeEscalation: false
             capabilities:
               drop: ["ALL"]
diff --git a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml
index 5c452ec..ec9684e 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml
@@ -35,6 +35,7 @@ spec:
               mountPath: /data
           securityContext:
             runAsNonRoot: true
+            runAsUser: 1001
             allowPrivilegeEscalation: false
             capabilities:
               drop: ["ALL"]
diff --git a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml
index 5377a68..9557cb1 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml
@@ -36,6 +36,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
             runAsNonRoot: true
+            runAsUser: 1001
             capabilities:
               drop: ["ALL"]
           env:
diff --git a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-beta.yaml b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-beta.yaml
index bed4bcf..50b067e 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-beta.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-beta.yaml
@@ -36,6 +36,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
             runAsNonRoot: true
+            runAsUser: 1001
             capabilities:
               drop: ["ALL"]
           env:
diff --git a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-gamma.yaml b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-gamma.yaml
index e512a64..7ea2547 100644
--- a/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-gamma.yaml
+++ b/servers/legion/k8s/neuron-technologies/swarm/rest-deployment-gamma.yaml
@@ -36,6 +36,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
             runAsNonRoot: true
+            runAsUser: 1001
             capabilities:
               drop: ["ALL"]
           env: