bugfix: set fsGroupChangePolicy to on root mismatch (#191)

Signed-off-by: Smuu <[email protected]>
celestiaorg · Sep 22, 2023 · 9620d29 · 9620d29
1 parent 4615401
commit 9620d29
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/k8s/k8s_pod.go b/pkg/k8s/k8s_pod.go
@@ -496,8 +496,10 @@ func preparePodSpec(spec PodConfig, init bool) (v1.PodSpec, error) {
 	var err error
 
 	// Prepare security context
+	podFSGroupChangePolicy := v1.FSGroupChangeOnRootMismatch
 	securityContext := v1.PodSecurityContext{
-		FSGroup: &spec.FsGroup,
+		FSGroup:             &spec.FsGroup,
+		FSGroupChangePolicy: &podFSGroupChangePolicy,
 	}
 
 	// Prepare main container