apiVersion: apps/v1
kind: Deployment
metadata:
  name: satusehat-worker
spec:
  template:
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 65532
        runAsGroup: 65532
        fsGroup: 65532
        fsGroupChangePolicy: OnRootMismatch
      containers:
        - name: satusehat-worker
          workingDir: /app
          volumeMounts:
            - name: satusehat-worker-internal-data
              mountPath: /app/internal
      volumes:
        - name: satusehat-worker-internal-data
          persistentVolumeClaim:
            claimName: satusehat-worker-data