DevFW-CICD/stacks-instances
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(sizer-receiver): 🐛 add fsGroup to pod securityContext for PVC write access

Browse source 
Distroless nonroot container (UID 65534) needs matching fsGroup to write
to the PVC used for SQLite migrations.

Ref: IPCEICIS-8514
This commit is contained in:
Daniel Sy 2026-04-15 14:45:27 +02:00
parent 9374d90d1f
commit a3bae88ce9
Signed by untrusted user: danielsy
GPG key ID: 1F39A8BBCD2EE3D3
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
otc/dev.t09.de/stacks/garm/sizer-receiver/deployment.yaml
View file

@ -16,6 +16,8 @@ spec:
labels: labels:
app: sizer-receiver app: sizer-receiver
spec: spec:
securityContext:
fsGroup: 65534
containers: containers:
- name: receiver - name: receiver
image: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-receiver:latest image: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-receiver:latest