Running as non-root

[larsla]

I want to run all containers as non-root and tried using:

global:
  podSecurityContext:
    fsGroup: 1001

  containerSecurityContext:
     capabilities:
       drop:
         - ALL
     runAsNonRoot: true
     runAsUser: 1001
     runAsGroup: 1001

This fails the pods on start with: 2025/11/12 14:33:09 unable to create open /etc/cadence/config/docker.yaml: permission denied
due to https://github.com/cadence-workflow/cadence/blob/57f0d8d083f3f2da35ca24d99df06bbd626c5956/docker/start-cadence.sh#L7

There does not seem to be any configuration for where the Cadence configs are stored.
There is also no option to add volumeMounts (other than for tls) and initContainers to the pods to make a workaround.

Do you have any suggestions?

Thanks!