openshift-apps: add supplemental groups to fedora-ostree-pruner

This is similar to what we've done for coreos-ostree-importer. See https://pagure.io/releng/issue/8811#comment-629051 for more information.
2022-12-14 14:21:51 -05:00 · 2022-12-14 14:21:51 -05:00 · 2f42b33462
commit 2f42b33462
parent b6622ab49b
1 changed files with 4 additions and 0 deletions
--- a/roles/openshift-apps/fedora-ostree-pruner/templates/deploymentconfig.yml
+++ b/roles/openshift-apps/fedora-ostree-pruner/templates/deploymentconfig.yml
@ -28,6 +28,10 @@ spec:
        image: ""
        imagePullPolicy: IfNotPresent
        resources: {}
+      # The files in the ostree volumes are created with group ownership of 263.
+      # We need to have 263 in our supplemental groups. See https://pagure.io/releng/issue/8811#comment-629051
+      securityContext:
+        supplementalGroups: [263]
      volumes:
      - name: fedora-ostree-content-volume
        persistentVolumeClaim: