infrastructure-kubernetes-security-migration-job-fails-with-oserror-read-only-file-sy-de30ea5d

THEN Set the LITELLM_MIGRATION_DIR environment variable to a writable path (e.g., /tmp/prisma) and mount an emptyDir volume at that path. Additionally, use the non-root Docker image of LiteLLM to prevent Prisma from writing to its own package directory, which is read-only in secure environments.

securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: true
envVars:
  LITELLM_MIGRATION_DIR: "/tmp/prisma"
volumeMounts:
  - name: migration-dir
    mountPath: /tmp/prisma
volumes:
  - name: migration-dir
    emptyDir:
      sizeLimit: 500Mi