7.5 Easy Installer discussionmw

[heungheung]

not sure if this is environment (CSP) specific

In 7.5 easy installer, we are seeing the following error when starting the discussionmw pod

> [email protected] start /work
> node ./bin/www

internal/fs/utils.js:269
    throw err;
    ^

Error: EACCES: permission denied, mkdir '../log'
    at Object.mkdirSync (fs.js:921:3)
    at Object.<anonymous> (/work/libs/sb_logger_util/index.js:12:6)
    at Module._compile (internal/modules/cjs/loader.js:999:30)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1027:10)
    at Module.load (internal/modules/cjs/loader.js:863:32)
    at Function.Module._load (internal/modules/cjs/loader.js:708:14)
    at Module.require (internal/modules/cjs/loader.js:887:19)
    at require (internal/modules/cjs/helpers.js:74:18)
    at Object.<anonymous> (/work/proxy/proxyUtils.js:5:18)
    at Module._compile (internal/modules/cjs/loader.js:999:30) {
  errno: -13,
  syscall: 'mkdir',
  code: 'EACCES',
  path: '../log'
}
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] start: `node ./bin/www`
npm ERR! Exit status 1
npm ERR! 
npm ERR! Failed at the [email protected] start script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR!     /root/.npm/_logs/2025-02-13T00_23_55_250Z-debug.log

thus, discussionmw can never be started, crashing and keep restarting

diving into the helmchart
https://github.com/project-sunbird/sunbird-ed-installer/blob/main/helmcharts/edbb/charts/discussionmw/values.yaml#L19-L23

securityContext:
  readOnlyRootFilesystem: false
  capabilities:
    drop:
    - ALL

It looks like dropping ALL capabilities might be the cause - if we remove the drop in the deployment manually, the pod start without problem and running happily.