fix(browser): set group mount policy

fix(file-browser): change auth mode to proxy
fix(filebrowser): add admin perm to users
2026-06-22 20:01:03 +00:00 · 2026-06-22 19:42:52 +00:00 · 2026-01-10 22:14:51 +02:00
1 changed files with 9 additions and 0 deletions
@@ -528,6 +528,9 @@ func (r *ServerManagerReconciler) BrowserPod(s *servermanagerv1alpha1.ServerMana
 			Protocol:      port.Protocol,
 		}
 	}
+	var fsGroupValue int64 = 2000
+	var runAsUserValue int64 = 1000
+	policy := corev1.FSGroupChangeOnRootMismatch // Optimizes startup speed

 	pod := &corev1.Pod{
 		ObjectMeta: metav1.ObjectMeta{
@@ -536,6 +539,12 @@ func (r *ServerManagerReconciler) BrowserPod(s *servermanagerv1alpha1.ServerMana
 			Labels:    map[string]string{"browser": s.Name},
 		},
 		Spec: corev1.PodSpec{
+			SecurityContext: &corev1.PodSecurityContext{
+				FSGroup:             &fsGroupValue,
+				RunAsUser:           &runAsUserValue,
+				RunAsGroup:          &fsGroupValue,
+				FSGroupChangePolicy: &policy,
+			},
 			Volumes: []corev1.Volume{
 				{
 					Name: "volume",
Author	SHA1	Message	Date
acoolname	1f611efed0	fix(browser): set group mount policy Build and Push Docker Image / Build image (push) Successful in 1m46s Details	2026-06-22 20:01:03 +00:00
acoolname	935861a107	fix(file-browser): change auth mode to proxy Build and Push Docker Image / Build image (push) Successful in 1m48s Details	2026-06-22 19:42:52 +00:00
acoolname	926828a2dc	fix(filebrowser): add admin perm to users Build and Push Docker Image / Build image (push) Successful in 1m49s Details	2026-01-10 22:14:51 +02:00