Cannot change git branch that dodal is pointing to in P51 k8s container

[subughimire420]

In P51 container, the persistent volume is mounted in the scratch area.

In theory, this should enable developers to change the git branches of modules installed in workspace_git.

In bluesky 1.7.1, I have run into permission issue.

Acceptance Criteria

• Change git branch of apps installed in workspace_git

[tpoliaw]

While I think this was related to running as p51detector, would a temporary workaround be to pass the config option inline in the git command (so the /.gitconfig file doesn't need to be edited)?

git -c safe.directory=/workspace_git/dodal status

[subughimire420]

This bypassed the "dubious ownership" safety check but did not fix permission issues. As such could not pull & checkout to my dodal branch.

[dan-fernandes]

I think this may relate to securityContext not being propagated to the init container. Right now I don't think we can deterministically set / guess what user the init container will run at, and I have a feeling that this will cause permission errors when editing things the init container may have created (such as dependencies in the scratch area).

I made and closed a PR here but will make a proper ticket for it.

As discussed with @subughimire420 via Slack, the best approach right now is to have the main container run as UID 1000.