aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-476: fix(chart): add fsGroup for workspace PVC write access #102

Merged
aaron merged 1 commit from fix/homelab-476-recreate-strategy into live 2026-03-30 12:22:27 +00:00
Conversation 0 Commits 1 Files changed 1 +4
aaron commented 2026-03-30 12:22:21 +00:00
Owner
Copy link

Summary

  • Adds fsGroup: 1000 to pod securityContext when execution PVC is enabled
  • Fixes permission denied when QueryChat creates session dirs under /workspace/chat-sessions/
  • PVC mounts as root-owned but container runs as appuser (uid 1000)

Test plan

  • ArgoCD sync → pod restarts → verify /workspace group ownership
  • Send chat message → QueryChat creates session dir → claude -p spawns
## Summary - Adds fsGroup: 1000 to pod securityContext when execution PVC is enabled - Fixes permission denied when QueryChat creates session dirs under /workspace/chat-sessions/ - PVC mounts as root-owned but container runs as appuser (uid 1000) ## Test plan - ArgoCD sync → pod restarts → verify /workspace group ownership - Send chat message → QueryChat creates session dir → claude -p spawns
HOMELAB-476: fix(chart): add fsGroup for workspace PVC write access
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
48cdeef600 
Workspace PVC mounts as root-owned, but container runs as appuser (uid
1000). Without fsGroup, QueryChat activity cannot create session dirs
under /workspace/chat-sessions/. Only applied when execution is enabled.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
aaron merged commit ad768003f9 into live 2026-03-30 12:22:27 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!102
No description provided.