From b166f228304e1032cf8c3b0d8a7c52c55bf12d95 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Wed, 5 Aug 2026 16:47:48 -0300
Subject: [PATCH] fix(hermes-triage-demo): agent pod securityContext must match
 jnlp uid 1000

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 services/jenkins/configmap-jcasc.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/services/jenkins/configmap-jcasc.yaml b/services/jenkins/configmap-jcasc.yaml
index 57a07cf11..c1c6d14d3 100644
--- a/services/jenkins/configmap-jcasc.yaml
+++ b/services/jenkins/configmap-jcasc.yaml
@@ -465,8 +465,10 @@ data:
                   spec:
                     serviceAccountName: jenkins
                     securityContext:
-                      runAsUser: 1001
-                      runAsGroup: 1001
+                      runAsUser: 1000
+                      runAsGroup: 1000
+                      fsGroup: 1000
+                      fsGroupChangePolicy: "OnRootMismatch"
                     nodeSelector:
                       kubernetes.io/arch: arm64
                       node-role.kubernetes.io/worker: "true"