From a32995b1a1777cb5af2677301b6bb32a292bbae2 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Tue, 19 May 2026 20:37:50 -0300
Subject: [PATCH] openclaw: fix gateway scratch permissions

---
 services/openclaw/deployment.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/services/openclaw/deployment.yaml b/services/openclaw/deployment.yaml
index ade0d593..fae9f884 100644
--- a/services/openclaw/deployment.yaml
+++ b/services/openclaw/deployment.yaml
@@ -40,6 +40,32 @@ spec:
                     values:
                       - titan-20
       initContainers:
+        - name: init-permissions
+          image: busybox:1.37
+          imagePullPolicy: IfNotPresent
+          command:
+            - sh
+            - -c
+            - |
+              set -e
+              chown -R 1000:1000 /home/node/.openclaw /home/node/.local/bin /tmp
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+          volumeMounts:
+            - name: home
+              mountPath: /home/node/.openclaw
+            - name: tmp
+              mountPath: /tmp
+            - name: tools
+              mountPath: /home/node/.local/bin
+          resources:
+            requests:
+              cpu: 25m
+              memory: 32Mi
+            limits:
+              cpu: 100m
+              memory: 64Mi
         - name: init-config
           image: busybox:1.37
           imagePullPolicy: IfNotPresent