pulp / pulp/pulp-operator

Wrong runAsUser UID for pulp_web container

Open
#1,492 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Issue Triage-Needed
Dominant language
Go
Stars
88
Forks
66
Avg merge
53m
Merged PRs (30d)
1

Description

We have updated our Kubernetes cluster to a recent version (1.33). After the update, the pulp-web container can no longer start. The error message is:

2025/07/27 05:50:07 [emerg] 8#8: mkdir() "/var/cache/nginx/client_temp" failed (13: Permission denied)
nginx: [emerg] mkdir() "/var/cache/nginx/client_temp" failed (13: Permission denied)

The operator starts the container with:

runAsUser: 700
fsGroup: 700

However, in the pulp_web image, the UID 101 is used for the nginx user.
I suspect this is the reason for the "permission denied" error, but I'm not 100% sure.

Is there an "easy" way to implement a workaround for this?
Or is there perhaps a way to override UID 700 with 101?

Thank you very much for your response.

Update:

When i use fsGroup: 0 than i can start teh pulp-web container.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the operator configuration for the pulp_web container and compare its runAsUser and fsGroup settings with the image’s nginx UID 101. Reproduce the startup failure on Kubernetes 1.33 using the reported security context, then verify that the container starts without the nginx permission-denied error under the supported configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes, nginx
Domain
devops, infrastructure
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.