CouchDB on Kubernetes requires privileged access

[icrc-fdeniger]

CouchDB requires root (privileged) access on Kubernetes, which should be avoided.

Expected Behavior

Deploying CouchDB with Helm without requiring privileged access

Current Behavior

If CouchDB is deployed via Helm without modifications, the following error occurs:

/docker-entrypoint.sh: line 89: /opt/couchdb/.erlang.cookie: Permission denied

Possible Solution

Write .erlang.cookie in the mounted volume /opt/couchdb/data or a dedicated one

[sergey-safarov]

Similar issue when CouchDB config file mounted into /opt/couchdb/etc/local.d from K8s ConfigMap.
/docker-entrypoint.sh script try change owner for /opt/couchdb recursively and this fail because cannot change owner for mounted file from ConfigMap.

It will be fine to exclude /opt/couchdb/etc/local.d from find + chown and just check files in this folder readable.