TLDR Dev · ARTICLES & TUTORIALS

A ONE-LINE KUBERNETES FIX THAT SAVED 600 HOURS A YEAR

blog.cloudflare.com10 min read

Summary from the TLDR Dev newsletter

Cloudflare reduced Atlantis restart times on Kubernetes from 30 minutes to 30 seconds by updating the `securityContext` to `fsGroupChangePolicy: OnRootMismatch`. This one-line fix prevented Kubernetes from recursively checking millions of file permissions on every restart, reclaiming 600 hours of engineering time annually.