fix(forgejo-runner): add fsGroup 1000 so runner user can write /data/.runner — register hit permission denied on root-owned Longhorn PVC

2026-08-18 15:08:02 -07:00
parent 7e345625fa
commit 6cbd887b89
1 changed files with 4 additions and 0 deletions
@@ -17,6 +17,10 @@ spec:
      labels:
        app: {{ .Release.Name }}
    spec:
+      # runner image runs as UID 1000; fsGroup makes the Longhorn /data PVC
+      # group-writable so `register` can write /data/.runner (else permission denied).
+      securityContext:
+        fsGroup: 1000
      tolerations:
        {{- toYaml .Values.tolerations | nindent 8 }}
      {{- with .Values.nodeSelector }}