.

openbao/openbao.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: openbao
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   resources:
     requests:
       storage: 5Gi
@@ -46,6 +46,24 @@ spec:
       labels:
         app: openbao
     spec:
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: "OnRootMismatch"
+      initContainers:
+        - name: fix-permissions
+          image: busybox:1.36
+          command:
+            - sh
+            - -c
+            - |
+              mkdir -p /openbao/file
+              chown -R 100:1000 /openbao/file
+              chmod -R ug+rwX /openbao/file
+          securityContext:
+            runAsUser: 0
+          volumeMounts:
+            - name: data
+              mountPath: /openbao/file
       containers:
         - name: openbao
           image: ghcr.io/openbao/openbao:2.4.3
@@ -60,7 +78,7 @@ spec:
             - name: config
               mountPath: /openbao/config
             - name: data
-              mountPath: /openbao/data
+              mountPath: /openbao/file
       volumes:
         - name: config
           configMap: