apiVersion: batch/v1
kind: Job
metadata:
  name: openclaw-fix-pvc-perms
  namespace: openclaw
spec:
  template:
    spec:
      restartPolicy: Never
      serviceAccountName: openclaw
      containers:
        - name: fix
          image: registry.access.redhat.com/ubi9/ubi-minimal:9.5
          command:
            - /bin/sh
            - -lc
            - |
              set -eu
              echo "Fixing group permissions under /data (PVC)"
              echo "NOTE: This job intentionally avoids chown or any hardcoded UID/GID assumptions."

              chmod -R g+rwX /data
              find /data -type d -exec chmod 2775 {} \;

              echo "Done"
              ls -la /data | head -n 100 || true
          volumeMounts:
            - name: config
              mountPath: /data
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: openclaw-config