openclaw: fix gateway scratch permissions

services/openclaw/deployment.yaml

@@ -40,6 +40,32 @@ spec:
                     values:
                       - titan-20
       initContainers:
+        - name: init-permissions
+          image: busybox:1.37
+          imagePullPolicy: IfNotPresent
+          command:
+            - sh
+            - -c
+            - |
+              set -e
+              chown -R 1000:1000 /home/node/.openclaw /home/node/.local/bin /tmp
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+          volumeMounts:
+            - name: home
+              mountPath: /home/node/.openclaw
+            - name: tmp
+              mountPath: /tmp
+            - name: tools
+              mountPath: /home/node/.local/bin
+          resources:
+            requests:
+              cpu: 25m
+              memory: 32Mi
+            limits:
+              cpu: 100m
+              memory: 64Mi
         - name: init-config
           image: busybox:1.37
           imagePullPolicy: IfNotPresent