chore(deployment): fix permissions

.woodpecker.yaml

@@ -0,0 +1,13 @@
+---
+labels:
+  backend: kubernetes
+steps:
+  - name: linting
+    image: cytopia/yamllint:latest
+    commands:
+      - yamllint -f colored -s .
+when:
+  - event:
+      - push
+      - manual
+      - pull_request

.yamllint

@@ -0,0 +1,12 @@
+---
+yaml-files:
+  - '*.yaml'
+  - '*.yml'
+  - '.yamllint'
+
+extends: default
+
+rules:
+  line-length: disable
+  indentation:
+    indent-sequences: consistent

k8s/deployment.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -21,8 +22,8 @@ spec:
         app: forgejo-pod
     spec:
       containers:
-      - image: codeberg.org/forgejo/forgejo:10.0.1
-        imagePullPolicy: Always
+      - image: codeberg.org/forgejo/forgejo:10.0.1-rootless
+        imagePullPolicy: IfNotPresent
         env:
         - name: USER_UID
           value: "1000"
@@ -39,6 +40,14 @@ spec:
         volumeMounts:
         - mountPath: "/data"
           name: forgejo-pv-storage
+      initContainers:
+      - name: fix-permissions
+        image: busybox
+        imagePullPolicy: IfNotPresent
+        command: ["sh", "-c", "chown -R 1000:1000 /mnt"]
+        volumeMounts:
+        - mountPath: "/mnt"
+          name: forgejo-pv-storage
       volumes:
       - name: forgejo-pv-storage
         persistentVolumeClaim:

k8s/ingress.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:

k8s/namespace.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

k8s/persistentvolumeclaim.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:

k8s/service.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Service
 metadata: