From 080a33bab85f18191d8145e37baba9f9dfc97fa3 Mon Sep 17 00:00:00 2001
From: Nish Anil <nanil@microsoft.com>
Date: Wed, 16 Feb 2022 03:58:08 +0530
Subject: [PATCH] Fixes for AKS

---
 deploy/k8s/helm/apigwws/envoy.yaml                | 2 +-
 deploy/k8s/helm/apigwws/templates/deployment.yaml | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/deploy/k8s/helm/apigwws/envoy.yaml b/deploy/k8s/helm/apigwws/envoy.yaml
index 9f82487e8..939649e60 100644
--- a/deploy/k8s/helm/apigwws/envoy.yaml
+++ b/deploy/k8s/helm/apigwws/envoy.yaml
@@ -9,7 +9,7 @@ static_resources:
   - address:
       socket_address:
         address: 0.0.0.0
-        port_value: 80
+        port_value: 8080
     filter_chains:
     - filters:
       - name: envoy.filters.network.http_connection_manager
diff --git a/deploy/k8s/helm/apigwws/templates/deployment.yaml b/deploy/k8s/helm/apigwws/templates/deployment.yaml
index bbe7fedf8..3bbcec274 100644
--- a/deploy/k8s/helm/apigwws/templates/deployment.yaml
+++ b/deploy/k8s/helm/apigwws/templates/deployment.yaml
@@ -26,6 +26,10 @@ spec:
         linkerd.io/inject: enabled
       {{- end }}           
     spec:
+      securityContext:
+          runAsUser: 2000
+          runAsGroup: 3000
+          fsGroup: 2000    
       {{ if .Values.inf.registry -}}
       imagePullSecrets:
       - name: {{ .Values.inf.registry.secretName }}
@@ -87,7 +91,7 @@ spec:
           {{- end }}
           ports:
             - name: http
-              containerPort: 80
+              containerPort: 8080
               protocol: TCP
             - name: admin
               containerPort: 8001