chore: Add Traefik persistent volume permissions workaround

2024-06-10 22:19:29 +10:00 · 2024-06-10 22:19:29 +10:00 · 544f98a8fb
commit 544f98a8fb
parent 562e0b8167
1 changed files with 5 additions and 1 deletions
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml
@ -6,7 +6,11 @@
            initContainers:
              - name: volume-permissions
                image: busybox:1
-                command: ["sh", "-c", "touch /data/acme.json && chmod -Rv 600 /data/* && chown 65532:65532 /data/acme.json"]
+                command: ["sh", "-c", "touch /data/acme.json; chown 65532 /data/acme.json; chmod -v 600 /data/acme.json"]
+                securityContext:
+                  runAsNonRoot: false
+                  runAsGroup: 0
+                  runAsUser: 0
                volumeMounts:
                  - name: data
                    mountPath: /data