logo

A one-line Kubernetes fix that saved 600 hours a year

ID: f3a92b48-1c37-5141-be6a-fd266620daf9

STIX ID: report--f3a92b48-1c37-5141-be6a-fd266620daf9

Feed Name: Cloudflare Blog

Date Published: 2026-03-26

Date Updated: 2026-04-27

Author: Braxton Schafer

...
...

This engineering post describes diagnosing and resolving very slow Atlantis (Terraform orchestration) pod restarts caused by Kubernetes recursively changing file ownership on a persistent volume with millions of files. By setting pod.spec.securityContext.fsGroupChangePolicy to `OnRootMismatch` (instead of the default `Always`), the team reduced restart time from ~30 minutes to ~30 seconds, reclaiming approximately 50 hours of blocked engineering time per month.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.