PVC Write permissions

juju
5

Sorry @wallyworld still not quite sussed this.

Here’s my spec:

        spec = {
            "version": 3,
            "kubernetesResources":{
                "pod":{
                    "securityContext":{
                        "fsGroup": 1001,
                        "runAsUser": 1001,
                        "runAsGroup":1001,
                    }
                }
            },
            "containers": [
                {
                    "name": self.app.name,
                    "imageDetails": image_details,
                    "imagePullPolicy": "Always",
                    "ports": ports,
                },
            ],
        }

it validated and deployed but still fails. And if I edit the podspec on the cluster it says:

 containers:
  - image: bitnami/solr:8.7.0-debian-10-r31
    imagePullPolicy: Always
    name: solr
    ports:
    - containerPort: 8983
      name: solr
      protocol: TCP
    resources: {}
    securityContext:
      allowPrivilegeEscalation: true
      readOnlyRootFilesystem: false
      runAsNonRoot: false

Which clearly doesn’t have the stuff I specified in it.