diff options
| author | Paul Buetow <paul@buetow.org> | 2026-01-09 11:25:30 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-01-09 11:25:30 +0200 |
| commit | c737ccac87b398084bf5fa50e509127e055d4b8e (patch) | |
| tree | 003afe20c35818862c0cbaeff64bfe18af61c944 /f3s/git-server | |
| parent | 567c1a9e792ab8f0fcf51617c2663a3d23d6d78d (diff) | |
Fix cgit permissions - use UID 101 (nginx user)
The cgit image runs as nginx user (UID 101), not www-data (UID 33).
- Update initContainer to chown cache to 101:1000
- Update cgit securityContext to runAsUser: 101
Diffstat (limited to 'f3s/git-server')
| -rw-r--r-- | f3s/git-server/helm-chart/templates/deployment.yaml | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml index 6c424a0..fe999cb 100644 --- a/f3s/git-server/helm-chart/templates/deployment.yaml +++ b/f3s/git-server/helm-chart/templates/deployment.yaml @@ -26,7 +26,7 @@ spec: - -c - | mkdir -p /cache-init - chown -R 33:1000 /cache-init + chown -R 101:1000 /cache-init mkdir -p /ssh-init chown -R 0:0 /ssh-init volumeMounts: @@ -90,8 +90,8 @@ spec: - name: cgit-cache mountPath: /var/cache/cgit securityContext: - runAsUser: 33 - runAsGroup: 33 + runAsUser: 101 + runAsGroup: 101 allowPrivilegeEscalation: false capabilities: drop: ["ALL"] |