📦 deps(thirdparty): update snapshots

antigravity-awesome-skills/plugins/antigravity-awesome-skills-claude/skills/k8s-manifest-generator/assets/deployment-template.yaml

@@ -51,26 +51,38 @@ spec:
       # Pod-level security context
       securityContext:
         runAsNonRoot: true
-        runAsUser: 1000
-        runAsGroup: 1000
-        fsGroup: 1000
+        runAsUser: 10001
+        runAsGroup: 10001
+        fsGroup: 10001
         seccompProfile:
           type: RuntimeDefault
 
       # Init containers (optional)
       initContainers:
       - name: init-wait
-        image: busybox:1.36
+        image: busybox:1.37.0
+        imagePullPolicy: Always
         command: ['sh', '-c', 'echo "Initializing..."']
+        resources:
+          requests:
+            memory: "32Mi"
+            cpu: "25m"
+          limits:
+            memory: "64Mi"
+            cpu: "50m"
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
-          runAsUser: 1000
+          runAsUser: 10001
+          capabilities:
+            drop:
+            - ALL
 
       containers:
       - name: <container-name>
-        image: <registry>/<image>:<tag>  # Never use :latest
-        imagePullPolicy: IfNotPresent
+        image: <registry>/<image>@sha256:<digest>
+        imagePullPolicy: Always
 
         ports:
         - name: http
@@ -155,7 +167,7 @@ spec:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
-          runAsUser: 1000
+          runAsUser: 10001
           capabilities:
             drop:
             - ALL

antigravity-awesome-skills/plugins/antigravity-awesome-skills-claude/skills/k8s-manifest-generator/assets/service-template.yaml

@@ -54,9 +54,8 @@ spec:
     port: 443
     targetPort: https
     protocol: TCP
-  # Restrict access to specific IPs (optional)
-  # loadBalancerSourceRanges:
-  # - 203.0.113.0/24
+  loadBalancerSourceRanges:
+  - 203.0.113.0/24  # Replace with approved ingress CIDRs
 
 ---
 # Template 3: NodePort Service (Direct Node Access)