Fix Cedar Webhook startup issue: Add init container for certs permiss…

…ions
awslabs · Feb 9, 2025 · c2748d2 · c2748d2
1 parent f5a3c6c
commit c2748d2
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/manifests/cedar-authorization-webhook.yaml b/manifests/cedar-authorization-webhook.yaml
@@ -7,6 +7,13 @@ metadata:
   name: cedar-webhook
   namespace: kube-system
 spec:
+  initContainers:
+    - name: fix-cert-permissions
+      image: busybox
+      command: ["sh", "-c", "chown -R 65532:65532 /cedar-authorizer/certs && chmod -R g+rwX /cedar-authorizer/certs"]
+      volumeMounts:
+        - mountPath: /cedar-authorizer/certs
+          name: var-run-cedar-authorizer-certs
   containers:
     - name: cedar-webhook
       command: