securityContext: fsGroup: 33

das deployment opencode-nextcloud-stable starte nicht

Invalid value: []int64{33}: 33 is not an allowed group, provider "nonroot":

$ oc get events | grep FailedCreate
5m50s       Warning   FailedCreate             replicaset/nextcloud-b785d7bdd                              Error creating: pods "nextcloud-b785d7bdd-" is forbidden: unable to validate against any security context constraint: [provider "anyuid": Forbidden: not usable by user or serviceaccount, provider restricted: .spec.securityContext.fsGroup: Invalid value: []int64{33}: 33 is not an allowed group, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "log-collector-scc": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or serviceaccount]

Entfernt man

        securityContext:
          fsGroup: 33

dann gehts.

Offen

• sollten wir den nicht lieber in ein allowed Bereich verlegen?