Skip to content

Container don't start on RKE2 #814

Closed

Description

@Ginkan616

Describe your Issue

I try to start nexcloud on my RKE2 cluster but after a lot of test with the values i have always the same issue.

Logs and Errors

kubectl logs -n cloud nextcloud-5fbd5d748f-gsnjj --all-containers --tail=200
/entrypoint.sh: 118: cannot create /usr/local/etc/php/conf.d/redis-session.ini: Permission denied
Configuring Redis as session handler
crond: crond (busybox 1.37.0) started, log level 8
crond: can't set groups: Operation not permitted
crond: USER www-data pid 7 cmd php -f /var/www/html/cron.php

Describe your Environment

  • Kubernetes distribution: RKE2

  • Helm Version (or App that manages helm):
    version.BuildInfo{Version:"v3.17.3", GitCommit:"e4da49785aa6e6ee2b86efd5dd9e43400318262b", GitTreeState:"clean", GoVersion:"go1.23.7"}

  • Helm Chart Version:
    NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
    nextcloud cloud 1 2025-11-22 22:02:43.438581025 +0100 CET deployed nextcloud-8.5.9 32.0.2

  • values.yaml:

# values.yaml — chart: nextcloud/nextcloud

nextcloud:
  host: fqdn
  username: admin
  password: "XXX"
  configs:
    10-overrides.config.php: |-
      <?php
      $CONFIG = array (
        'overwrite.cli.url' => 'https://fqdn',
        'overwriteprotocol' => 'https',
      );

image:
  repository: nextcloud
  tag: 32.0.1-apache

persistence:
  enabled: true
  existingClaim: pvc-cloud

internalDatabase:
  enabled: false
mariadb:
  enabled: false

# Base externe PostgreSQL
externalDatabase:
  enabled: true
  type: postgresql
  host: "my-pgvecto-db-postgresql.database.svc.cluster.local"
  port: 5432
  user: "nextcloud"
  database: "nextcloud"
  existingSecret:
    enabled: true
    secretName: nextcloud-db-secret
    passwordKey: db-password

ingress:
  enabled: true
  className: nginx
  annotations:
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
  tls:
    - hosts: [fqdn]
      secretName: secret

redis:
  enabled: true
  usePassword: true
  existingSecret:
    enabled: true
    secretName: nextcloud-redis-secret
    passwordKey: redis-password
  master:
    persistence:
      enabled: false
  replica:
    persistence:
      enabled: false

config:
  redis:
    enabled: true
    host: nextcloud-redis-master
    port: 6379
    password: "changeme"
    dbindex: 0
    useForSessionLocking: true
    useForFileLocking: true

securityContext:
  runAsUser: 33
  runAsGroup: 33
  runAsNonRoot: true

podSecurityContext:
  fsGroup: 33
  fsGroupChangePolicy: "OnRootMismatch"

cronjob:
  enabled: true
  schedule: "*/5 * * * *"

replicaCount: 1

nodeSelector:
  kubernetes.io/hostname: rke2node2

resources:
  requests:
    cpu: "500m"
    memory: "2Gi"
  limits:
    cpu: "2"
    memory: "6Gi"

Additional context, if any

My RKE2 cluster have a local raid 6 it's working with corosync and pacemaker with an nfs HA but i already have some pod running like immich.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions