From 07b98c6a0829d1e09207528335347cb82d666828 Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Thu, 5 Mar 2026 22:53:51 +0000
Subject: [PATCH] Automated Manifest Update (#4452)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4452
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
---
 .../cl01tl/manifests/booklore/Deployment-booklore.yaml   | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml b/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
index 6a9846102..24e024fb8 100644
--- a/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
+++ b/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
@@ -29,6 +29,11 @@ spec:
       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 1000
+        runAsUser: 1000
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -37,6 +42,10 @@ spec:
         - env:
             - name: TZ
               value: America/Chicago
+            - name: USER_ID
+              value: "1000"
+            - name: GROUP_ID
+              value: "1000"
             - name: DATABASE_URL
               value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
             - name: DATABASE_USERNAME