From 6cbd887b89dc950a9c4fc8a93cf4bf41211e3545 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 21 Jul 2026 09:40:59 -0700
Subject: [PATCH] =?UTF-8?q?fix(forgejo-runner):=20add=20fsGroup=201000=20s?=
 =?UTF-8?q?o=20runner=20user=20can=20write=20/data/.runner=20=E2=80=94=20r?=
 =?UTF-8?q?egister=20hit=20permission=20denied=20on=20root-owned=20Longhor?=
 =?UTF-8?q?n=20PVC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../ci-cd/charts/forgejo-runner/templates/deployment.yaml     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/k8s/security/ci-cd/charts/forgejo-runner/templates/deployment.yaml b/k8s/security/ci-cd/charts/forgejo-runner/templates/deployment.yaml
index 49394ce..de33f29 100644
--- a/k8s/security/ci-cd/charts/forgejo-runner/templates/deployment.yaml
+++ b/k8s/security/ci-cd/charts/forgejo-runner/templates/deployment.yaml
@@ -17,6 +17,10 @@ spec:
       labels:
         app: {{ .Release.Name }}
     spec:
+      # runner image runs as UID 1000; fsGroup makes the Longhorn /data PVC
+      # group-writable so `register` can write /data/.runner (else permission denied).
+      securityContext:
+        fsGroup: 1000
       tolerations:
         {{- toYaml .Values.tolerations | nindent 8 }}
       {{- with .Values.nodeSelector }}