Fix SQLite READONLY: chown /data to UID 1000 via initContainer
PVC was written as root before runAsUser: 1000 was added; SQLite refused writes with SQLITE_READONLY. initContainer runs as root to chown the volume, then the app runs as UID 1000 as required.
This commit is contained in:
@@ -28,6 +28,16 @@ spec:
|
|||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
seccompProfile:
|
seccompProfile:
|
||||||
type: RuntimeDefault
|
type: RuntimeDefault
|
||||||
|
initContainers:
|
||||||
|
- name: fix-data-ownership
|
||||||
|
image: busybox:1.36
|
||||||
|
command: ["sh", "-c", "chown -R 1000:1000 /data"]
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
runAsNonRoot: false
|
||||||
|
volumeMounts:
|
||||||
|
- name: data
|
||||||
|
mountPath: /data
|
||||||
containers:
|
containers:
|
||||||
- name: neuron-mcp
|
- name: neuron-mcp
|
||||||
image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.15.3
|
image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.15.3
|
||||||
|
|||||||
Reference in New Issue
Block a user