keycloak: set fsGroup for data volume

2025-12-06 00:49:17 -03:00 · 2025-12-06 00:49:17 -03:00 · 1b01052eda
commit 1b01052eda
parent 1d346edd28
1 changed files with 5 additions and 0 deletions
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@ -16,6 +16,11 @@ spec:
      labels:
        app: keycloak
    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 0
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
      containers:
        - name: keycloak
          image: quay.io/keycloak/keycloak:26.0.7