From 308d54cc0b47bc19a37dceb00166e830229c2011 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes-agent@sirius0xdev.com>
Date: Tue, 26 May 2026 03:33:43 +0000
Subject: [PATCH] fix(kafka): add fsGroup to pod securityContext for PVC write
 permissions

Kraft mode fails with AccessDeniedException on meta.properties
because PVC mounts with root ownership. Adding fsGroup: 1000
ensures the volume group matches the Kafka container user.
---
 apps/base/customer1/siriusdevops-db/trading-kafka.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/base/customer1/siriusdevops-db/trading-kafka.yaml b/apps/base/customer1/siriusdevops-db/trading-kafka.yaml
index 6ff7c74..87b2e05 100644
--- a/apps/base/customer1/siriusdevops-db/trading-kafka.yaml
+++ b/apps/base/customer1/siriusdevops-db/trading-kafka.yaml
@@ -22,6 +22,8 @@ spec:
       pod:
         securityContext:
           runAsUser: 1000
+          runAsGroup: 1000
+          fsGroup: 1000
           runAsNonRoot: true
   entityOperator:
     topicOperator: {}