# EACCES: permission denied with custom user and group ID

**URL:** <https://forums.percona.com/t/eacces-permission-denied-with-custom-user-and-group-id/38131>\
**Category:** Percona Operator for MongoDB\
**Tags:** mongodb\
**Created:** [May 28, 2025, 1:12pm UTC](https://forums.percona.com/t/eacces-permission-denied-with-custom-user-and-group-id/38131 "2025-05-28T13:12:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Laurentiu\_Soica](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/laurentiu_soica/32/20523_2.png) [@Laurentiu\_Soica](https://forums.percona.com/u/Laurentiu_Soica)\
**Post date:** [May 28, 2025, 1:12pm UTC](https://forums.percona.com/t/eacces-permission-denied-with-custom-user-and-group-id/38131/1 "2025-05-28T13:12:55Z")

</div>

## Description:

For the following CR config, with custom runAsUser and runAsGroup:

```auto
  replsets:
  - containerSecurityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
    name: rs0
    podSecurityContext:
      fsGroup: 10001
      runAsGroup: 10001
      runAsNonRoot: true
      runAsUser: 10001

```

perconaservermongodbs CR status ends up in error:

```auto
status:
  conditions:
  - lastTransitionTime: "2025-05-28T11:29:21Z"
    message: 'handleReplsetInit: no mongod containers in running state'
    reason: ErrorReconcile
    status: "True"
    type: error
  message: |
    Error: handleReplsetInit: exec add admin user: command terminated with exit code 1 / Warning: Could not access file: EACCES: permission denied, mkdir '/.mongodb'
     / MongoServerError: not primary
  ready: 0
  replsets:
    rs0:
      ready: 0
      size: 0
  size: 0
  state: error

```

## Version:

```auto
Kubernetes v1.29.9+k3s1
Operator 1.19.1
Database 8

```

How do you run the MongoDB operator and replica sets in Kubernetes environments that do not allow running containers as root user/group?

---

<div class="post-metadata">

**Author:** ![Laurentiu\_Soica](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/laurentiu_soica/32/20523_2.png) [@Laurentiu\_Soica](https://forums.percona.com/u/Laurentiu_Soica)\
**Post date:** [June 5, 2025, 9:05am UTC](https://forums.percona.com/t/eacces-permission-denied-with-custom-user-and-group-id/38131/2 "2025-06-05T09:05:24Z")

</div>

The critical error, “MongoServerError: not primary” comes from the fact that I did not configure clusterServiceDNSSuffix. With that in place, the CR is successfully reconciled; users are created as well. There’s still the permission denied warning, but it does not block the reconciliation.