Fix: Deployment explicit UID 1000 for anyuid SCC support

manifests/deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: clawdbox
-  namespace: clawdbox
   labels:
     app: clawdbox
 spec:
@@ -17,9 +16,10 @@ spec:
       labels:
         app: clawdbox
     spec:
+      serviceAccountName: default
       containers:
       - name: clawdbox
-          image: default-route-openshift-image-registry.apps.lab.apilab.us/clawdbox/clawdbox:latest
+        image: image-registry.openshift-image-registry.svc:5000/park/clawdbox:latest
         imagePullPolicy: Always
         ports:
         - containerPort: 2222
@@ -36,7 +36,15 @@ spec:
           requests:
             memory: "512Mi"
             cpu: "250m"
-          securityContext: {}
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          fsGroup: 1000
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: RuntimeDefault
       volumes:
       - name: data-volume
         persistentVolumeClaim:
@@ -45,3 +53,28 @@ spec:
         secret:
           secretName: clawdbox-ssh-keys
           defaultMode: 0600
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: clawdbox
+  labels:
+    app: clawdbox
+spec:
+  ports:
+  - port: 2222
+    targetPort: 2222
+    name: ssh
+  selector:
+    app: clawdbox
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: clawdbox-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi