The entrypoint.sh was writing the rendered config back to the same directory as the source, which fails when the config is mounted from a Kubernetes ConfigMap (read-only filesystem). Write to /tmp instead. Co-Authored-By: Claude <noreply@anthropic.com>