knative
/
func
mirror of https://github.com/knative/func.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: mismatched container fs permissions (#2946)

This commit is contained in:
Luke Kingland 2025-07-24 19:54:08 +09:00 committed by GitHub
parent e06397d5c7
commit d04ff0a378
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/k8s/security_context.go
View File

@ -14,11 +14,12 @@ func defaultPodSecurityContext() *corev1.PodSecurityContext {
return nil
}
runAsUser := int64(1001)
runAsGroup := int64(1002)
runAsGroup := int64(0) // Match Tekton buildpack task group
fsGroup := int64(1002) // Keep FSGroup for volume ownership
return &corev1.PodSecurityContext{
RunAsUser: &runAsUser,
RunAsGroup: &runAsGroup,
FSGroup: &runAsGroup,
FSGroup: &fsGroup,
}
}