From e79424e6e1a63e02c709cd1d8be2b9b18d412f8f Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Sun, 29 Mar 2026 20:34:14 -0500
Subject: [PATCH] fix(mudcraft): run initContainer as UID 1000 so plugin dirs
 are writable

LuckPerms was failing with AccessDeniedException on /data/plugins/LuckPerms/libs
because the initContainer was creating directories as root. Main container runs
as UID 1000 and couldn't write inside them. Running initContainer as matching
UID 1000 fixes ownership.
---
 servers/legion/k8s/mudcraft/statefulset.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/servers/legion/k8s/mudcraft/statefulset.yaml b/servers/legion/k8s/mudcraft/statefulset.yaml
index b393086..e1e4429 100644
--- a/servers/legion/k8s/mudcraft/statefulset.yaml
+++ b/servers/legion/k8s/mudcraft/statefulset.yaml
@@ -17,7 +17,7 @@ spec:
       labels:
         app: mudcraft
       annotations:
-        kubectl.kubernetes.io/restartedAt: "2026-03-30T02:00:00Z"
+        kubectl.kubernetes.io/restartedAt: "2026-03-30T02:15:00Z"
     spec:
       terminationGracePeriodSeconds: 120
       initContainers:
@@ -27,6 +27,9 @@ spec:
         - name: install-plugins
           image: registry.neuralplatform.ai/mudcraft/plugins:e41f6256805c28b3bb8e8832293afa3eab701082
           imagePullPolicy: Always
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
           command:
             - sh
             - -c