From 5ab0098e34ccbdeb03fc0f1769200ef7c71f1565 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes-agent@sirius0xdev.com>
Date: Mon, 25 May 2026 23:53:55 +0000
Subject: [PATCH] fix Kafka config mount: use subPath to avoid
 /etc/kafka/secrets conflict

Container fails with 'read-only file system' when K8s tries to mount
a secret into /etc/kafka/secrets alongside the ConfigMap at /etc/kafka.
Switch to subPath mount of server.properties directly.
---
 apps/base/customer1/siriusdevops-db/kafka-broker.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/base/customer1/siriusdevops-db/kafka-broker.yaml b/apps/base/customer1/siriusdevops-db/kafka-broker.yaml
index 04f86b1..09cd58e 100644
--- a/apps/base/customer1/siriusdevops-db/kafka-broker.yaml
+++ b/apps/base/customer1/siriusdevops-db/kafka-broker.yaml
@@ -99,7 +99,8 @@ spec:
                 - ALL
           volumeMounts:
             - name: config
-              mountPath: /etc/kafka
+              mountPath: /etc/kafka/server.properties
+              subPath: server.properties
             - name: data
               mountPath: /var/lib/kafka/data
           readinessProbe: