From 0fc46baa1dcf8fe7eec96d413210027528bf73f4 Mon Sep 17 00:00:00 2001
From: Mihail Radkov <mihail.radkov@ontotext.com>
Date: Mon, 15 Jul 2024 12:58:40 +0300
Subject: [PATCH] GDB-10521: Containers workdir

---
 CHANGELOG.md                       | 5 +++++
 templates/graphdb/statefulset.yaml | 1 +
 templates/proxy/statefulset.yaml   | 1 +
 3 files changed, 7 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ee847a0f..e6aa4560 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,11 @@
       with `backup.cloud`
     - Added a new example under [examples/backup-local](examples/backup-local) showing how to use the local backup feature
 
+### Fixed
+
+- Updated the GraphDB containers to explicitly use `/tmp` as a working directory to avoid permission errors due to the
+  default security context's `readOnlyRootFilesystem` when the container has a starting folder different from `/tmp`.
+
 ## Version 11.1.3
 
 ### New
diff --git a/templates/graphdb/statefulset.yaml b/templates/graphdb/statefulset.yaml
index a221dab7..cd506acd 100644
--- a/templates/graphdb/statefulset.yaml
+++ b/templates/graphdb/statefulset.yaml
@@ -313,6 +313,7 @@ spec:
         - name: {{ .Chart.Name }}
           image: {{ include "graphdb.image" . }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          workingDir: /tmp
           {{- with .Values.command }}
           command: {{ toYaml . | nindent 12 }}
           {{- end }}
diff --git a/templates/proxy/statefulset.yaml b/templates/proxy/statefulset.yaml
index 8399e6c7..4a988de2 100644
--- a/templates/proxy/statefulset.yaml
+++ b/templates/proxy/statefulset.yaml
@@ -262,6 +262,7 @@ spec:
         - name: {{ include "graphdb-proxy.chartName" . }}
           image: {{ include "graphdb.image" . }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          workingDir: /tmp
           {{- if .Values.proxy.command }}
           command: {{ toYaml .Values.proxy.command | nindent 12 }}
           {{- else }}