add comments of 472 and 65534

JaredforReal · JaredforReal · commit 5249c10c9e70 · 2025-10-01T11:43:09.000+08:00
Signed-off-by: JaredforReal &lt;w13431838023@gmail.com&gt;
diff --git a/deploy/kubernetes/observability/grafana/deployment.yaml b/deploy/kubernetes/observability/grafana/deployment.yaml
@@ -15,7 +15,7 @@ spec:
         app: grafana
     spec:
       securityContext:
-        runAsNonRoot: true
+        # Run as non-root user 472 (grafana) and set fsGroup for volume permissions.
         runAsUser: 472
         fsGroup: 472
       containers:
diff --git a/deploy/kubernetes/observability/prometheus/deployment.yaml b/deploy/kubernetes/observability/prometheus/deployment.yaml
@@ -17,6 +17,7 @@ spec:
       serviceAccountName: prometheus
       securityContext:
         runAsNonRoot: true
+        # Run as user 'nobody' and group 'nobody' for enhanced security
         runAsUser: 65534
         fsGroup: 65534
       containers:
