From 2c568ae157ff6a7fcc41dea74464786e14df9bd2 Mon Sep 17 00:00:00 2001 From: Stefan van Beusekom Date: Mon, 20 Apr 2026 13:09:50 +0200 Subject: [PATCH 1/2] fix: set stdout and stderr logfiles to container streams --- jwtproxy/supervisord.conf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/jwtproxy/supervisord.conf b/jwtproxy/supervisord.conf index 2b6b1a31..e66e9c9f 100644 --- a/jwtproxy/supervisord.conf +++ b/jwtproxy/supervisord.conf @@ -22,6 +22,13 @@ user = proxy ; ; Unix socket paths are specified by command line. command=/app/server.py --port=808%(process_num)s +; In Kubernetes with readOnlyRootFilesystem, ensure logs go to the container +; stdout/stderr streams and never attempt rotation. +stdout_logfile=/proc/self/fd/1 +stdout_logfile_maxbytes=0 +stderr_logfile=/proc/self/fd/2 +stderr_logfile_maxbytes=0 + ; user=nobody autostart=true autorestart=true From 5a90775749a78a3a9c17d523cc711508761db091 Mon Sep 17 00:00:00 2001 From: Stefan van Beusekom Date: Mon, 20 Apr 2026 13:45:41 +0200 Subject: [PATCH 2/2] fix: trigger code check --- jwtproxy/supervisord.conf | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/jwtproxy/supervisord.conf b/jwtproxy/supervisord.conf index e66e9c9f..fe081c88 100644 --- a/jwtproxy/supervisord.conf +++ b/jwtproxy/supervisord.conf @@ -22,8 +22,7 @@ user = proxy ; ; Unix socket paths are specified by command line. command=/app/server.py --port=808%(process_num)s -; In Kubernetes with readOnlyRootFilesystem, ensure logs go to the container -; stdout/stderr streams and never attempt rotation. +; Kubernetes readOnlyRootFilesystem fix stdout_logfile=/proc/self/fd/1 stdout_logfile_maxbytes=0 stderr_logfile=/proc/self/fd/2