From 605b3dd912c21a4e7d6e53e5bf6ed4cd1dbaecf0 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@gmail.com>
Date: Wed, 25 Sep 2024 21:35:11 +0200
Subject: [PATCH] Refactor security context and add allowed CORS domains in
 m3uproxy configuration

---
 terraform/k8sapps/m3uproxy.tf                      | 8 +-------
 terraform/k8sapps/resources/m3uproxy/m3uproxy.json | 5 ++++-
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/terraform/k8sapps/m3uproxy.tf b/terraform/k8sapps/m3uproxy.tf
index 889284b..3a41394 100644
--- a/terraform/k8sapps/m3uproxy.tf
+++ b/terraform/k8sapps/m3uproxy.tf
@@ -221,12 +221,6 @@ resource "kubernetes_deployment" "proxy_pt" {
             mount_path = "/var/spol/squid"
           }
 
-          security_context {
-            allow_privilege_escalation = false
-            run_as_user                = 1000
-            run_as_group               = 1000
-          }
-
         }
 
         volume {
@@ -396,7 +390,7 @@ resource "kubernetes_deployment" "m3uproxy" {
   }
 }
 
-resource "kubernetes_cron_job" "geoip_update" {
+resource "kubernetes_cron_job_v1" "geoip_update" {
 
   metadata {
     name      = "geoip-update"
diff --git a/terraform/k8sapps/resources/m3uproxy/m3uproxy.json b/terraform/k8sapps/resources/m3uproxy/m3uproxy.json
index a8108c4..a8b693d 100644
--- a/terraform/k8sapps/resources/m3uproxy/m3uproxy.json
+++ b/terraform/k8sapps/resources/m3uproxy/m3uproxy.json
@@ -17,7 +17,10 @@
                 "10.1.0.0/16",
                 "10.152.183.0/24"
             ]
-        }
+        },
+        "allowed_cors_domains": [
+            "tv.alexpires.me"
+        ]
     },
     "auth": {
         "provider": "file",