Cron in Kubernetes: "can't set groups: Operation not permitted"

Support intro

Nextcloud version (eg, 20.0.5): 24.0.6
Operating system and version (eg, Ubuntu 20.04): Docker Image (Debian Bullseye)
Apache or nginx version (eg, Apache 2.4.25): Apache (see Docker image)
PHP version (eg, 7.4): 8.2 (see Docker image)
Environment infos: K3s v1.24.8+k3s1 as HA-cluster with Longhorn for storage

The issue you are facing:
The cron sidecar-container in my Pod is working, but doesn’t do anything and logs “can’t set groups: Operation not permitted”. All files have “www-data:www-data”-ownership, the pod is running with uid 33, gid 33 and groups 33. The cron-container logs only this “Operation not permitted” line but doesn’t give me any further clue where to look at and the nextcloud.log doesn’t even show a thing about the cronjob execution.
Nextcloud itself claims that the cron job did not run for a longer time. I can only convince Nextcloud, when I run the cron.php by hand from the outside. But even then only the time of the cron execution seems to be updated but the cron execution doesn’t update anything.

It would help me to get even a clue where the ownership mismatch might be.

Is this the first time you’ve seen this error? Yes

Steps to replicate it:

  1. Set up a kubernetes cluster
  2. Install the nextcloud helm chart
  3. Activate the cron-option in the chart values

The output of my nextcloud.log-file (only after I ran the cron.php manually, the cron-container doesn’t print anything by itself):

{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 4851","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Bookmarks\\BackgroundJobs\\ExtractFromNotesJob job with ID 4851","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Bookmarks\\BackgroundJobs\\ExtractFromNotesJob job with ID 4851 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 4","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Activity\\BackgroundJob\\ExpireActivities job with ID 4","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Activity\\BackgroundJob\\ExpireActivities job with ID 4 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6275","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Notifications\\BackgroundJob\\GenerateUserSettings job with ID 6275","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Notifications\\BackgroundJob\\GenerateUserSettings job with ID 6275 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3608","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Mail\\BackgroundJob\\CleanupJob job with ID 3608","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Mail\\BackgroundJob\\CleanupJob job with ID 3608 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 274","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 11","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\DAV\\BackgroundJob\\UpdateCalendarResourcesRoomsBackgroundJob job with ID 11","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\DAV\\BackgroundJob\\UpdateCalendarResourcesRoomsBackgroundJob job with ID 11 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 264","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:06:59+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OC\\Core\\BackgroundJobs\\CleanupLoginFlowV2 job with ID 264","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OC\\Core\\BackgroundJobs\\CleanupLoginFlowV2 job with ID 264 in 1 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 4850","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Bookmarks\\BackgroundJobs\\BackupJob job with ID 4850","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Bookmarks\\BackgroundJobs\\BackupJob job with ID 4850 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 625","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files\\BackgroundJob\\CleanupDirectEditingTokens job with ID 625","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\CleanupDirectEditingTokens job with ID 625 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3583","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Bookmarks\\BackgroundJobs\\FileCacheGCJob job with ID 3583","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Bookmarks\\BackgroundJobs\\FileCacheGCJob job with ID 3583 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3792","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Calendar\\BackgroundJob\\CleanUpOutdatedBookingsJob job with ID 3792","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":1,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"calendar","method":"","url":"--","message":"Found and deleted 0 outdated booking confirmations.","userAgent":"--","version":"24.0.6.1","data":{"app":"calendar"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Calendar\\BackgroundJob\\CleanUpOutdatedBookingsJob job with ID 3792 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 31","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Deck\\Cron\\ScheduledNotifications job with ID 31","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Deck\\Cron\\ScheduledNotifications job with ID 31 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3581","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files_External\\BackgroundJob\\CredentialsCleanup job with ID 3581","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files_External\\BackgroundJob\\CredentialsCleanup job with ID 3581 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3614","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OC\\Security\\Bruteforce\\CleanupJob job with ID 3614","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OC\\Security\\Bruteforce\\CleanupJob job with ID 3614 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 9","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files_Sharing\\BackgroundJob\\FederatedSharesDiscoverJob job with ID 9","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files_Sharing\\BackgroundJob\\FederatedSharesDiscoverJob job with ID 9 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3617","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Circles\\Cron\\Maintenance job with ID 3617","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"","method":"","url":"--","message":"[debug] running maintenance (3)","userAgent":"--","version":"24.0.6.1","data":{"app":""}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"","method":"","url":"--","message":"[debug] running maintenance (2)","userAgent":"--","version":"24.0.6.1","data":{"app":""}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"","method":"","url":"--","message":"[debug] running maintenance (1)","userAgent":"--","version":"24.0.6.1","data":{"app":""}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Circles\\Cron\\Maintenance job with ID 3617 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 3","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Activity\\BackgroundJob\\EmailNotification job with ID 3 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 16","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files\\BackgroundJob\\DeleteOrphanedItems job with ID 16","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedItems","method":"","url":"--","message":"0 orphaned system tag relations deleted","userAgent":"--","version":"24.0.6.1","data":{"app":"DeleteOrphanedItems"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedItems","method":"","url":"--","message":"0 orphaned user tag relations deleted","userAgent":"--","version":"24.0.6.1","data":{"app":"DeleteOrphanedItems"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedItems","method":"","url":"--","message":"0 orphaned comments deleted","userAgent":"--","version":"24.0.6.1","data":{"app":"DeleteOrphanedItems"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedItems","method":"","url":"--","message":"0 orphaned comment read marks deleted","userAgent":"--","version":"24.0.6.1","data":{"app":"DeleteOrphanedItems"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\DeleteOrphanedItems job with ID 16 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 4852","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Mail\\BackgroundJob\\OutboxWorkerJob job with ID 4852","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Mail\\BackgroundJob\\OutboxWorkerJob job with ID 4852 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 20","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OC\\Log\\Rotate job with ID 20","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OC\\Log\\Rotate job with ID 20 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 7","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"DeleteOrphanedSharesJob","method":"","url":"--","message":"0 orphaned share(s) deleted","userAgent":"--","version":"24.0.6.1","data":{"app":"DeleteOrphanedSharesJob"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files_Sharing\\DeleteOrphanedSharesJob job with ID 7 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 15","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:00+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files\\BackgroundJob\\ScanFiles job with ID 15","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files\\BackgroundJob\\ScanFiles job with ID 15 in 2 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 30","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Deck\\Cron\\DeleteCron job with ID 30","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Deck\\Cron\\DeleteCron job with ID 30 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6279","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OC\\Authentication\\Token\\TokenCleanupJob job with ID 6279","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Invalidating session tokens older than 2022-12-27T05:07:02+00:00","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Invalidating remembered session tokens older than 2022-12-13T05:07:02+00:00","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OC\\Authentication\\Token\\TokenCleanupJob job with ID 6279 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6769","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Bookmarks\\BackgroundJobs\\IndividualCrawlJob job with ID 6769","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Bookmarks\\BackgroundJobs\\IndividualCrawlJob job with ID 6769 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6770","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6770","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6770 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6771","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6771","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6771 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6772","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6772","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\DAV\\BackgroundJob\\UploadCleanup job with ID 6772 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"new parser added : FeedIo\\Standard\\Json","userAgent":"--","version":"24.0.6.1","data":{"app":"news"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"new parser added : FeedIo\\Standard\\Atom","userAgent":"--","version":"24.0.6.1","data":{"app":"news"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"new parser added : FeedIo\\Standard\\Rss","userAgent":"--","version":"24.0.6.1","data":{"app":"news"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"new parser added : FeedIo\\Standard\\Rdf","userAgent":"--","version":"24.0.6.1","data":{"app":"news"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3584","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3579","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 2038","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 1273","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 3616","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 8","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 2","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 1718","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 452","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 17","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 21","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 1272","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 12","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 10","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6276","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Notifications\\BackgroundJob\\SendNotificationMails job with ID 6276","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Notifications\\BackgroundJob\\SendNotificationMails job with ID 6276 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 32","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Deck\\Cron\\CardDescriptionActivity job with ID 32","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Deck\\Cron\\CardDescriptionActivity job with ID 32 in 0 seconds","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}
{"reqId":"TSO0BR3ixUfJudibfLlo","level":0,"time":"2022-12-28T05:07:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"CLI cron call has selected job with ID 6278","userAgent":"--","version":"24.0.6.1","data":{"app":"cron"}}

The output of my config.php file in /var/www/html/config/config.php of my Nextcloud-pod:

<?php
$CONFIG = array (
  'htaccess.RewriteBase' => '/',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'apps_paths' => 
  array (
    0 => 
    array (
      'path' => '/var/www/html/apps',
      'url' => '/apps',
      'writable' => false,
    ),
    1 => 
    array (
      'path' => '/var/www/html/custom_apps',
      'url' => '/custom_apps',
      'writable' => true,
    ),
  ),
  'instanceid' => 'XXXX',
  'passwordsalt' => 'XXX',
  'secret' => 'XXX',
  'trusted_domains' => 
  array (
    0 => 'XXX',
  ),
  'datadirectory' => '/var/www/html/data',
  'dbtype' => 'pgsql',
  'version' => '24.0.6.1',
  'overwriteprotocol' => 'https',
  'overwrite.cli.url' => 'https://XXX',
  'dbname' => 'nextcloud',
  'dbhost' => 'postgres-server.postgres',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'XXX',
  'dbpassword' => 'XXX',
  'installed' => true,
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'ssl',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'XXX',
  'mail_domain' => 'XXX',
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'XXX',
  'mail_smtpport' => 'XXX',
  'mail_smtpname' => 'XXX',
  'mail_smtppassword' => 'XXX',
  'twofactor_enforced' => 'false',
  'twofactor_enforced_groups' => 
  array (
  ),
  'twofactor_enforced_excluded_groups' => 
  array (
  ),
  'maintenance' => false,
  'loglevel' => 0,
  'app_install_overwrite' => 
  array (
    0 => 'spreed',
    1 => 'contacts',
    2 => 'groupfolders',
  ),
  'ldapIgnoreNamingRules' => false,
  'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
  'theme' => '',
);

The output of my cron container:

crond: wakeup dt=60
crond: file www-data:
crond:  line php -f /var/www/html/cron.php
crond:  job: 0 php -f /var/www/html/cron.php
crond: can't set groups: Operation not permitted
crond: USER www-data pid  18 cmd php -f /var/www/html/cron.php

The description of the current pod:

Name:             nextcloud-646cdf649f-725qd
Namespace:        nextcloud
Priority:         0
Service Account:  default
Node:             node-1/X.X.X.X
Start Time:       Tue, 27 Dec 2022 08:30:50 +0100
Labels:           app=nextcloud
                  pod-template-hash=646cdf649f
Annotations:      <none>
Status:           Running
IP:               10.42.5.136
IPs:
  IP:           10.42.5.136
  IP:           2001:cafe:42:6::88
Controlled By:  ReplicaSet/nextcloud-646cdf649f
Containers:
  nextcloud:
    Container ID:   containerd://47d9a196a7ae79ac1e21bed0c27f00ec97abe8ef2f6db1d21ef571da58150cf3
    Image:          nextcloud:24.0.6
    Image ID:       docker.io/library/nextcloud@sha256:47828fea14e8a1c629cfdfb300fb4d3623467f8952aea703b05496edb242f184
    Port:           80/TCP
    Host Port:      0/TCP
    State:          Running
      Started:      Tue, 27 Dec 2022 08:30:56 +0100
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     1
      memory:  2Gi
    Requests:
      cpu:        500m
      memory:     1Gi
    Environment:  <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-tk5b7 (ro)
      /var/www from nextcloud-main (rw,path="root")
      /var/www/html from nextcloud-main (rw,path="html")
      /var/www/html/config from nextcloud-main (rw,path="config")
      /var/www/html/custom_apps from nextcloud-main (rw,path="custom_apps")
      /var/www/html/data from nextcloud-data (rw,path="data")
      /var/www/html/themes from nextcloud-main (rw,path="themes")
      /var/www/tmp from nextcloud-main (rw,path="tmp")
  nextcloud-cron:
    Container ID:  containerd://1456d94cb9f08fbb06fee994c24588f09c48083951cee006b56df5f9340cf4d9
    Image:         nextcloud:24.0.6
    Image ID:      docker.io/library/nextcloud@sha256:47828fea14e8a1c629cfdfb300fb4d3623467f8952aea703b05496edb242f184
    Port:          <none>
    Host Port:     <none>
    Command:
      /cron.sh
    State:          Running
      Started:      Tue, 27 Dec 2022 08:30:58 +0100
    Ready:          True
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-tk5b7 (ro)
      /var/www from nextcloud-main (rw,path="root")
      /var/www/html from nextcloud-main (rw,path="html")
      /var/www/html/config from nextcloud-main (rw,path="config")
      /var/www/html/custom_apps from nextcloud-main (rw,path="custom_apps")
      /var/www/html/data from nextcloud-data (rw,path="data")
      /var/www/html/themes from nextcloud-main (rw,path="themes")
      /var/www/tmp from nextcloud-main (rw,path="tmp")
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  nextcloud-main:
    Type:       PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace)
    ClaimName:  nextcloud-main
    ReadOnly:   false
  nextcloud-data:
    Type:       PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace)
    ClaimName:  nextcloud-data
    ReadOnly:   false
  kube-api-access-tk5b7:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason     Age   From               Message
  ----    ------     ----  ----               -------
  Normal  Scheduled  39m   default-scheduler  Successfully assigned nextcloud/nextcloud-646cdf649f-725qd to hnc-node-1
  Normal  Pulled     39m   kubelet            Container image "nextcloud:24.0.6" already present on machine
  Normal  Created    39m   kubelet            Created container nextcloud
  Normal  Started    39m   kubelet            Started container nextcloud
  Normal  Pulled     39m   kubelet            Container image "nextcloud:24.0.6" already present on machine
  Normal  Created    39m   kubelet            Created container nextcloud-cron
  Normal  Started    39m   kubelet            Started container nextcloud-cron

The deployment file for the pod (based on the official helm chart):

kind: Deployment
apiVersion: apps/v1
metadata:
  name: nextcloud
  labels:
    app: nextcloud
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nextcloud
  template:
    metadata:
      labels:
        app: nextcloud
    spec:
      containers:
        - name: nextcloud
          image: {{ .Values.image }}:{{ .Values.version }}
          imagePullPolicy: IfNotPresent

          resources:
            {{- with .Values.resources }}
            limits: 
              cpu: {{ .limits.cpu | quote }}
              memory: {{ .limits.memory | quote }}
            requests:
              cpu: {{ .requests.cpu | quote }}
              memory: {{ .requests.memory | quote }}
            {{- end }}
          
          ports:
            - name: nextcloud-webui
              containerPort: 80
              protocol: TCP
          
          volumeMounts:
{{- include "nextcloud.volumeMounts" . | trim | nindent 12 }}

        - name: nextcloud-cron
          image: {{ .Values.image }}:{{ .Values.version }}
          imagePullPolicy: IfNotPresent
          command:
            - /cron.sh
          volumeMounts:
{{- include "nextcloud.volumeMounts" . | trim | nindent 12 }}

      volumes:
        - name: nextcloud-main
          persistentVolumeClaim:
            claimName: nextcloud-main
        - name: nextcloud-data
          persistentVolumeClaim:
            claimName: nextcloud-data

      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: node-role.kubernetes.io/master
                operator: DoesNotExist

      securityContext:
        runAsUser: 33
        runAsGroup: 33
        fsGroup: 33
        fsGroupChangePolicy: "Always"

And the template helper for the helm chart:

{{- define "nextcloud.volumeMounts" -}}
- mountPath: /var/www
  name: nextcloud-main
  subPath: root
- mountPath: /var/www/html
  name: nextcloud-main
  subPath: html
- mountPath: /var/www/tmp
  name: nextcloud-main
  subPath: tmp
- mountPath: /var/www/html/data
  name: nextcloud-data
  subPath: data
- mountPath: /var/www/html/themes
  name: nextcloud-main
  subPath: themes
- mountPath: /var/www/html/config
  name: nextcloud-main
  subPath: config
- mountPath: /var/www/html/custom_apps
  name: nextcloud-main
  subPath: custom_apps
{{- end -}}
1 Like

I think I’m seeing something similar:

As to the root cause, maybe there’s some kind of privilege de-escalation by busybox’s crond, or from code in the cron job itself. Something that ultimately tries to call the setgroups() native library function. Check out: