Fix SQLite READONLY: chown /data to UID 1000 via initContainer

PVC was written as root before runAsUser: 1000 was added; SQLite refused writes with SQLITE_READONLY. initContainer runs as root to chown the volume, then the app runs as UID 1000 as required.
2026-04-26 01:43:37 -05:00
parent 4137fb556b
commit 754cd72df5
1 changed files with 10 additions and 0 deletions
@@ -28,6 +28,16 @@ spec:
        runAsUser: 1000
        seccompProfile:
          type: RuntimeDefault
+      initContainers:
+        - name: fix-data-ownership
+          image: busybox:1.36
+          command: ["sh", "-c", "chown -R 1000:1000 /data"]
+          securityContext:
+            runAsUser: 0
+            runAsNonRoot: false
+          volumeMounts:
+            - name: data
+              mountPath: /data
      containers:
        - name: neuron-mcp
          image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.15.3