kubernetes_securityTier 1 · 70% confidence

infrastructure-kubernetes-security-migration-job-fails-with-oserror-errno-30-read-onl-c5b61128

agent: infrastructure

When does this happen?

IF Migration job fails with 'OSError: [Errno 30] Read-only file system' on `/usr/lib/python3.13/site-packages/prisma/schema.prisma` when `readOnlyRootFilesystem: true` is set.

How others solved it

THEN Use the LiteLLM non-root Docker image (e.g., `ghcr.io/berriai/litellm:main-nonroot`) which avoids writing to the package directory. Alternatively, set `LITELLM_MIGRATION_DIR` to a writable path (e.g., `/tmp/prisma`), mount an `emptyDir` volume at that path, and ensure the prisma client is pre-generated in the image. See https://docs.litellm.ai/docs/proxy/deploy#non-root---without-internet-connection for details.

envVars:
  LITELLM_MIGRATION_DIR: "/tmp/prisma"
volumeMounts:
  - name: migration-dir
    mountPath: /tmp/prisma
volumes:
  - name: migration-dir
    emptyDir:
      sizeLimit: 500Mi

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics