GCP infrastructure support

charts/platforma/templates/deployment.yaml

@@ -75,6 +75,36 @@ spec:
       securityContext:
         fsGroup: 1010
         runAsNonRoot: true
+      {{- if or .Values.storage.workspace.fsxLustre.enabled
+                .Values.storage.workspace.filestore.enabled
+                .Values.storage.workspace.nfs.enabled
+                (and .Values.storage.workspace.pvc.enabled
+                     .Values.storage.workspace.pvc.chownOnCreate) }}
+      initContainers:
+        # Chown the workspace volume to the Platforma runtime UID/GID.
+        # Needed for NFS-backed volumes (Filestore, NFS, FSx Lustre) and
+        # generic PVCs where the StorageClass does not set uid/gid natively.
+        # EFS Access Points and existingClaim set permissions externally.
+        - name: chown-workspace
+          image: busybox:1.36
+          command: ["sh", "-c", "chown -R 1010:1010 /data/workspace && chmod 755 /data/workspace"]
+          securityContext:
+            runAsUser: 0
+            runAsNonRoot: false
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+              add: ["CHOWN", "FOWNER"]
+          resources:
+            requests:
+              cpu: 10m
+              memory: 16Mi
+            limits:
+              memory: 32Mi
+          volumeMounts:
+            - name: workspace
+              mountPath: /data/workspace
+      {{- end }}
       containers:
         - name: platforma
           image: {{ include "platforma.image" . }}
@@ -124,10 +154,10 @@ spec:
             - "--k8s-namespace={{ .Release.Namespace }}"
             {{- if .Values.kueue.maxJobResources }}
             {{- if .Values.kueue.maxJobResources.cpu }}
-            - "--runner-max-cpu-request={{ .Values.kueue.maxJobResources.cpu }}"
+            - "--k8s-max-cpu-request={{ .Values.kueue.maxJobResources.cpu }}"
             {{- end }}
             {{- if .Values.kueue.maxJobResources.memory }}
-            - "--runner-max-ram-request={{ .Values.kueue.maxJobResources.memory }}"
+            - "--k8s-max-ram-request={{ .Values.kueue.maxJobResources.memory }}"
             {{- end }}
             {{- end }}
             - "--runner-enable-docker"