A one-line Kubernetes fix that saved 600 hours a year
Summary
Cloudflare's post describes how a single Kubernetes security-context change (fsGroupChangePolicy OnRootMismatch) dramatically reduced Atlantis restart times from about 30 minutes to 30 seconds. The improvement reclaimed roughly 50 hours of blocked engineering time per month (about 600 hours per year) by avoiding recursive ownership changes on large persistent volumes. It also provides practical guidance on auditing securityContext settings for scalable workloads.