From ed3b5553fa192a5d4ca4b84653d201e02ffac657 Mon Sep 17 00:00:00 2001 From: Jansen Fuller Date: Thu, 30 Apr 2026 23:52:55 -0600 Subject: [PATCH] Updating filesystem settings to prevent issues --- helm/taskchampion-sync-server/values.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/helm/taskchampion-sync-server/values.yaml b/helm/taskchampion-sync-server/values.yaml index 46091d4..efd214f 100644 --- a/helm/taskchampion-sync-server/values.yaml +++ b/helm/taskchampion-sync-server/values.yaml @@ -53,9 +53,10 @@ replicas: count: 1 # Security context for the pod +# NOTE: runAsUser and runAsGroup are intentionally unset. +# The Docker entrypoint requires root to chown the data directory and then +# drops privileges via su-exec to the taskchampion user (uid 1092). securityContext: - runAsUser: 1092 - runAsGroup: 100 fsGroup: 100 # SQLite backend configuration (mutually exclusive with postgres)