fix(grafana): disable init-chown-data for Pod Security / k3s

Made-with: Cursor
2026-03-20 11:34:52 +01:00
parent 4f66f7f7ed
commit 1dc04c9fc5
2 changed files with 7 additions and 0 deletions
--- a/gitops/observability/values.yaml
+++ b/gitops/observability/values.yaml
@@ -109,6 +109,9 @@ grafanaOnelabIngress:
 grafana:
  adminUser: admin
  adminPassword: changeme
+  # Root+CHOWN init breaks under Pod Security / restricted policies (k3s). fsGroup:472 on the pod is enough for most PVCs.
+  initChownData:
+    enabled: false
  # Load dashboards from ConfigMaps labeled grafana_dashboard (see templates/configmap-dashboard-onelab-logs.yaml).
  sidecar:
    dashboards: