From 144a75e2bd058ce171e69165ae0c70b20505dd5a Mon Sep 17 00:00:00 2001
From: aggarwalakshun <aggarwalakshun@gmail.com>
Date: Thu, 1 May 2025 23:11:50 +0530
Subject: [PATCH] Add security context to Bazarr, Radarr, Semaphore, and Sonarr
 deployments

---
 cluster/apps/bazarr/bazarr.yml       | 4 ++++
 cluster/apps/radarr/radarr.yml       | 4 ++++
 cluster/apps/semaphore/semaphore.yml | 2 +-
 cluster/apps/sonarr/sonarr.yml       | 4 ++++
 4 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/cluster/apps/bazarr/bazarr.yml b/cluster/apps/bazarr/bazarr.yml
index 877ed45..fdb5157 100644
--- a/cluster/apps/bazarr/bazarr.yml
+++ b/cluster/apps/bazarr/bazarr.yml
@@ -14,6 +14,10 @@ spec:
       labels:
         app: bazarr
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       containers:
       - name: bazarr
         image: linuxserver/bazarr:1.5.1
diff --git a/cluster/apps/radarr/radarr.yml b/cluster/apps/radarr/radarr.yml
index 3ed446d..fddce88 100644
--- a/cluster/apps/radarr/radarr.yml
+++ b/cluster/apps/radarr/radarr.yml
@@ -14,6 +14,10 @@ spec:
       labels:
         app: radarr
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       containers:
       - name: radarr
         image: lscr.io/linuxserver/radarr:5.22.4
diff --git a/cluster/apps/semaphore/semaphore.yml b/cluster/apps/semaphore/semaphore.yml
index fc1339d..519e2f2 100644
--- a/cluster/apps/semaphore/semaphore.yml
+++ b/cluster/apps/semaphore/semaphore.yml
@@ -27,7 +27,7 @@ spec:
           done
       containers:
       - name: semaphore
-        image: semaphoreui/semaphore:v2.14.6
+        image: public.ecr.aws/semaphore/pro/server:v2.14.4
         ports:
         - containerPort: 3000
         envFrom:
diff --git a/cluster/apps/sonarr/sonarr.yml b/cluster/apps/sonarr/sonarr.yml
index 46b412e..74b805e 100644
--- a/cluster/apps/sonarr/sonarr.yml
+++ b/cluster/apps/sonarr/sonarr.yml
@@ -14,6 +14,10 @@ spec:
       labels:
         app: sonarr
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       containers:
       - name: sonarr
         image: lscr.io/linuxserver/sonarr:4.0.14