The write-prompt init container runs
`mkdir -p /paperclip/instances/default/run-logs/<companyId>/<agentId>` to
seed the run-logs directory before the main `claude` container starts.
The init container's volumeMounts only included `prompt` (and
`prompt-secret` on the large-prompt path) — the shared `data` PVC
mounted at /paperclip in the main container was missing. So the mkdir tries
to create /paperclip in the busybox overlay rootfs, where uid 1000 cannot
write at /, and the Job fails with:
mkdir: can't create directory '/paperclip/': Permission denied
before the main container ever runs.
Add { name: 'data', mountPath: '/paperclip' } to both branches' volumeMounts
so the init container writes to the same shared PVC the main container
mounts.
Reproduced + verified against a kubeadm 1.35 cluster on cephfs RWX.
Omar Ramadan