From ae761b801ad3a61359d248c5c9395cc4442690cf Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Tue, 25 Feb 2020 16:23:01 -0500
Subject: [PATCH] openshift-apps/coreos-ostree-importer: try out supplemental
 groups

We're hitting issues sharing files from inside and outside of openshift.
Let's see if we can have 48 and 263 in our supplemental groups.
---
 .../coreos-ostree-importer/templates/deploymentconfig.yml     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/openshift-apps/coreos-ostree-importer/templates/deploymentconfig.yml b/roles/openshift-apps/coreos-ostree-importer/templates/deploymentconfig.yml
index e145f8627f..e69fa1d99d 100644
--- a/roles/openshift-apps/coreos-ostree-importer/templates/deploymentconfig.yml
+++ b/roles/openshift-apps/coreos-ostree-importer/templates/deploymentconfig.yml
@@ -43,6 +43,10 @@ spec:
         image: ""
         imagePullPolicy: IfNotPresent
         resources: {}
+      # The files in the ostree volumes are created by either 48 (apache user by bodhi/pungi)
+      # or 263 (ftpsync by new-updates-sync). We need to have these as our supplemental groups
+      securityContext:
+        supplementalGroups: [48, 263]
       volumes:
       - name: fedora-ostree-content-volume
         persistentVolumeClaim: