more user/group changes

kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml

@@ -29,10 +29,12 @@ spec:
   values:
     defaultPodOptions:
       securityContext:
-        runAsUser: 1000
+        fsGroup: 568
-        runAsGroup: 1001 # group 1001 is required for the flood container to run without errors.
+        runAsGroup: 568
-        fsGroup: 1001
+        runAsNonRoot: true
-        fsGroupChangePolicy: OnRootMismatch
+        runAsUser: 568
+        seccompProfile:
+          type: RuntimeDefault
     controllers:
       flood:
         annotations:
@@ -52,6 +54,17 @@ spec:
                 cpu: 15m
               limits:
                 memory: 512Mi
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                  - ALL
+              readOnlyRootFilesystem: true
     service:
       app:
         controller: *app

kubernetes/apps/qbittorrent/flood/ks.yaml

@@ -27,5 +27,3 @@ spec:
     substitute:
       APP: *app
       VOLSYNC_CAPACITY: 2Gi
-      APP_UID: "1000"
-      APP_GID: "1001"