fix : db-migration 수정

k8s/dev/db-migration-job.yaml

@@ -3,6 +3,8 @@ kind: Job
 metadata:
   name: auth-db-migration
   annotations:
+    argocd.argoproj.io/hook: PreSync
+    argocd.argoproj.io/hook-delete-policy: BeforeHookCreation,HookSucceeded
     argocd.argoproj.io/sync-wave: "-1"
 spec:
   backoffLimit: 1

k8s/platform-dev/keycloak-deployment.yaml

@@ -12,6 +12,7 @@ spec:
       labels:
         app: keycloak
     spec:
+      automountServiceAccountToken: false
       securityContext:
         runAsNonRoot: true
         seccompProfile:
@@ -88,6 +89,11 @@ spec:
             limits:
               cpu: 1000m
               memory: 1536Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
       volumes:
         - name: keycloak-realm-import
           configMap:

k8s/platform-dev/postgres-statefulset.yaml

@@ -14,9 +14,6 @@ spec:
         app: postgres
     spec:
       securityContext:
-        runAsNonRoot: true
-        runAsUser: 999
-        runAsGroup: 999
         fsGroup: 999
         seccompProfile:
           type: RuntimeDefault
@@ -34,6 +31,9 @@ spec:
             runAsUser: 0
             runAsGroup: 0
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
           volumeMounts:
             - name: postgres-data
               mountPath: /var/lib/postgresql/data