Anyone running Woodpecker agent successfully on OpenShift/MicroShift?

[kastl-ars]

Dear all,

I am just starting with Woodpecker on OpenShift/MicroShift. I got both the server and the agent installed, after tweaking the securityContext settings to remove the hardcoded UIDs, GIDs etc.

(This is an OpenShift specialty, each namespace gets its own range of UIDs, and only those are allowed. Removing any fixed settings will allow OpenShift to set the proper UIDs itself).

I also got the clone step of an actual workflow to start after finding out how to add backend_options to it.

However, the pod is being admitted and started, but the workflow fails due to a permission error in the clone step:

2026/08/04 07:42:04 open /app/.netrc: permission denied

So it looks like the plugin-git image is not prepared to be run with a variable UID?

I'll open up an issue in the plugin-git repository, but wanted to ask if anyone has a working configuration for running a Woodpecker agent on OpenShift/MicroShift (without loosening the security constraints that are one of the features of OpenShift/MicroShift)?

Kind Regards,
Johannes

[kastl-ars]

With a small modification, the plugin-git image works with a non-root user:
woodpecker-ci/plugin-git#369 (comment)

I am still interested in hearing people's experiences with Woodpecker and OpenShift/MicroShift.