will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(swarm): add runAsUser: 1001 to all swarm containers (#44)

Browse Source
This commit is contained in:
Will Anderson
2026-04-27 05:13:50 +00:00
parent f8e3db6d94
commit b2940c70e0
7 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/neuron-technologies/prod/backup-cronjob.yaml
+4 -2
View File
@@ -82,7 +82,8 @@ spec:
restic snapshots 2>/dev/null || restic init restic snapshots 2>/dev/null || restic init
restic backup \ restic backup \
/data/neuron-prod.db \ /data/neuron.db \
/data/mcp-sessions.db \
--tag neuron-prod \ --tag neuron-prod \
--host legion \ --host legion \
--exclude '*.db-shm' \ --exclude '*.db-shm' \
@@ -110,7 +111,8 @@ spec:
restic snapshots 2>/dev/null || restic init restic snapshots 2>/dev/null || restic init
restic backup \ restic backup \
/data/neuron-prod.db \ /data/neuron.db \
/data/mcp-sessions.db \
--tag neuron-prod \ --tag neuron-prod \
--host legion \ --host legion \
--exclude '*.db-shm' \ --exclude '*.db-shm' \
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml
+1
View File
@@ -35,6 +35,7 @@ spec:
mountPath: /data mountPath: /data
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml
+1
View File
@@ -35,6 +35,7 @@ spec:
mountPath: /data mountPath: /data
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml
+1
View File
@@ -35,6 +35,7 @@ spec:
mountPath: /data mountPath: /data
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
servers/legion/k8s/neuron-technologies/swarm/rest-deployment-alpha.yaml
+1
View File
@@ -36,6 +36,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
env: env:
servers/legion/k8s/neuron-technologies/swarm/rest-deployment-beta.yaml
+1
View File
@@ -36,6 +36,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
env: env:
servers/legion/k8s/neuron-technologies/swarm/rest-deployment-gamma.yaml
+1
View File
@@ -36,6 +36,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1001
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
env: env: