From 784c40b65c28208427a22f658aef1e9a3951454b Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Tue, 24 Mar 2026 19:22:11 +1100 Subject: [PATCH] fix: clone r10k config to /tmp/r10k-config instead of /shared MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The g10k-code cronjob was failing with "Permission denied" because the container (running as uid 999, non-root) attempted to create /shared in the container root filesystem, which is not writable. Clone to /tmp which is always writable by unprivileged users. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush --- apps/base/puppet/cronjob_g10k-code.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/base/puppet/cronjob_g10k-code.yaml b/apps/base/puppet/cronjob_g10k-code.yaml index c20ce49..74f55e5 100644 --- a/apps/base/puppet/cronjob_g10k-code.yaml +++ b/apps/base/puppet/cronjob_g10k-code.yaml @@ -44,9 +44,9 @@ spec: - | set -e echo "Cloning r10k config repository..." - git clone https://git.unkin.net/unkin/puppet-r10k.git /shared + git clone https://git.unkin.net/unkin/puppet-r10k.git /tmp/r10k-config echo "Running g10k..." - /usr/bin/g10k -config /shared/r10k.yaml + /usr/bin/g10k -config /tmp/r10k-config/r10k.yaml envFrom: null env: [] securityContext: