fix(ingest): Correct group in pod for running norshelf

2026-06-18 18:06:58 +02:00
parent 7750b0acd1
commit 2f93cbed07
1 changed files with 2 additions and 2 deletions
@@ -15,11 +15,11 @@ spec:
      labels:
        app.kubernetes.io/name: ingest
    spec:
-      # NOTE: Run as the data uid so downloaded files are owned correctly
+      # Run as the data uid/gid so files are owned correctly. No fsGroup: it would
+      # recursively chown the whole shared CephFS volume on every mount.
      securityContext:
        runAsUser: 5000
        runAsGroup: 5000
-        fsGroup: 5000
      containers:
        - name: ingest
          image: git.oceanbox.io/oceanbox/churn/ingest:d77ad04a-debug