From a3bae88ce90f58a821bc62b4ce49bfc71e827d47 Mon Sep 17 00:00:00 2001
From: Daniel Sy <Daniel.Sy@telekom.de>
Date: Wed, 15 Apr 2026 14:45:27 +0200
Subject: [PATCH] =?UTF-8?q?fix(sizer-receiver):=20=F0=9F=90=9B=20add=20fsG?=
 =?UTF-8?q?roup=20to=20pod=20securityContext=20for=20PVC=20write=20access?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Distroless nonroot container (UID 65534) needs matching fsGroup to write
to the PVC used for SQLite migrations.

Ref: IPCEICIS-8514
---
 otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml b/otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml
index 91a1049..3cbd5f8 100644
--- a/otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml
+++ b/otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml
@@ -16,6 +16,8 @@ spec:
       labels:
         app: sizer-receiver
     spec:
+      securityContext:
+        fsGroup: 65534
       containers:
         - name: receiver
           image: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-receiver:latest