From 1b01052eda38393c84378eca69254417ec99d1c8 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 6 Dec 2025 00:49:17 -0300
Subject: [PATCH] keycloak: set fsGroup for data volume

---
 services/keycloak/deployment.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 22c795d..3beec0a 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -16,6 +16,11 @@ spec:
       labels:
         app: keycloak
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 0
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: keycloak
           image: quay.io/keycloak/keycloak:26.0.7