Skip to content

fix: run sgf.dev as non-root - #6

Merged
glitchedmob merged 2 commits into
mainfrom
fix/sgf-dev-non-root-storage
Aug 8, 2026
Merged

glitchedmob merged 2 commits into
mainfrom
fix/sgf-dev-non-root-storage

Conversation

@glitchedmob

@glitchedmob glitchedmob commented Aug 8, 2026 •

Copy link
Copy Markdown
Member

Fixes the staging MainDom permission failure while keeping the application runtime non-root.

  • Enforce runAsNonRoot while relying on the image to define its UID and GID.
  • Repair existing Umbraco and data-protection PVC ownership from the temporary root init container.
  • Align the container port and data-protection mount with the non-root image.
  • Leave the production image version unchanged; chore: update sgf.dev production to v1.9.0 [AUTOMATION] #3 provides the compatible v1.8.4 production upgrade.

PR #3 should be merged before production is started with this shared deployment configuration.

@glitchedmob
glitchedmob merged commit cfbd92b into main Aug 8, 2026
@glitchedmob
glitchedmob deleted the fix/sgf-dev-non-root-storage branch August 8, 2026 17:04
infra-k8s-deployment-automation Bot added a commit that referenced this pull request Aug 23, 2026
Updates `ghcr.io/sgfdevs/cms.methodconf.com` from `1.2.0` to `1.2.1` in
`src/k8s/apps/methodconf.com/staging`.

**Changes**

[Compare
v1.2.0...v1.2.1](sgfdevs/cms.methodconf.com@v1.2.0...v1.2.1)

-
[`4ac8bc8`](sgfdevs/cms.methodconf.com@4ac8bc8)
ci: add stable aggregate checks by @glitchedmob
-
[`6a06da0`](sgfdevs/cms.methodconf.com@6a06da0)
chore(deps): bump
glitchedmob/infra-gha/.github/workflows/kustomize-image-pr.yml from
0.8.1 to 0.11.3 in the github-actions group
([#6](sgfdevs/cms.methodconf.com#6)) by
@dependabot[bot]
-
[`9ead4a7`](sgfdevs/cms.methodconf.com@9ead4a7)
fix: pin compatible release tooling
([#8](sgfdevs/cms.methodconf.com#8)) by
@glitchedmob
-
[`f48a544`](sgfdevs/cms.methodconf.com@f48a544)
Bump the dotnet group with 4 updates
([#7](sgfdevs/cms.methodconf.com#7)) by
@dependabot[bot]

Co-authored-by: infra-k8s-deployment-automation[bot] <314666576+infra-k8s-deployment-automation[bot]@users.noreply.github.com>
glitchedmob pushed a commit that referenced this pull request Aug 23, 2026
Updates `ghcr.io/sgfdevs/cms.methodconf.com` from `1.2.0` to `1.2.1` in
`src/k8s/apps/methodconf.com/production`.

**Changes**

[Compare
v1.2.0...v1.2.1](sgfdevs/cms.methodconf.com@v1.2.0...v1.2.1)

-
[`4ac8bc8`](sgfdevs/cms.methodconf.com@4ac8bc8)
ci: add stable aggregate checks by @glitchedmob
-
[`6a06da0`](sgfdevs/cms.methodconf.com@6a06da0)
chore(deps): bump
glitchedmob/infra-gha/.github/workflows/kustomize-image-pr.yml from
0.8.1 to 0.11.3 in the github-actions group
([#6](sgfdevs/cms.methodconf.com#6)) by
@dependabot[bot]
-
[`9ead4a7`](sgfdevs/cms.methodconf.com@9ead4a7)
fix: pin compatible release tooling
([#8](sgfdevs/cms.methodconf.com#8)) by
@glitchedmob
-
[`f48a544`](sgfdevs/cms.methodconf.com@f48a544)
Bump the dotnet group with 4 updates
([#7](sgfdevs/cms.methodconf.com#7)) by
@dependabot[bot]

Co-authored-by: infra-k8s-deployment-automation[bot] <314666576+infra-k8s-deployment-automation[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant