From fd42d47a11abbaf3acf82313c7d09c2689bef05a Mon Sep 17 00:00:00 2001
From: hermes <hermes@kilhaasi>
Date: Tue, 8 Sep 2026 14:53:08 +0000
Subject: [PATCH] Fix: Grafana permission issue (fsGroup 472), remove unused
 secret volume

---
 homeassistant-observability/grafana-deployment.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/homeassistant-observability/grafana-deployment.yaml b/homeassistant-observability/grafana-deployment.yaml
index 07992e7..94e03e9 100644
--- a/homeassistant-observability/grafana-deployment.yaml
+++ b/homeassistant-observability/grafana-deployment.yaml
@@ -15,6 +15,10 @@ spec:
       labels:
         app: grafana
     spec:
+      securityContext:
+        runAsUser: 472
+        runAsGroup: 472
+        fsGroup: 472
       containers:
         - name: grafana
           image: grafana/grafana:11.3.0
@@ -78,9 +82,6 @@ spec:
             name: grafana-dashboards
         - name: grafana-dashboards
           emptyDir: {}
-        - name: grafana-db-secret
-          secret:
-            secretName: homeassistant-db-credentials
         - name: grafana-dashboards-vol
           configMap:
             name: tecalor-dashboard