chore: fix plex

joryirving · Feb 29, 2024 · c6be79e · c6be79e
1 parent 8c001eb
commit c6be79e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/kubernetes/teyvat/apps/media/plex/app/helmrelease.yaml b/kubernetes/teyvat/apps/media/plex/app/helmrelease.yaml
@@ -60,6 +60,12 @@ spec:
                   timeoutSeconds: 1
                   failureThreshold: 3
               readiness: *probes
+              startup:
+                enabled: false
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
             resources:
               requests:
                 cpu: 100m
@@ -72,9 +78,10 @@ spec:
           securityContext:
             runAsUser: 568
             runAsGroup: 568
+            runAsNonRoot: true
             fsGroup: 568
             fsGroupChangePolicy: OnRootMismatch
-            supplementalGroups: [105]
+            supplementalGroups: [44, 10000, 109]
     service:
       main:
         type: LoadBalancer