Hello OP community!

I just installed a fresh 14-slim version of OP in my OnPremises cluster and everything seems to run smoothly but ONE important thing, the attachments.

Here is my values.yaml file

openproject:
  https: true

service:
  enabled: true

ingress:
  enabled: true
  host: ****
  ingressClassName: ingress-nginx
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: 200m
  tls:
    enabled: true
    secretName: "openproject-tls"

persistence:
  enabled: false

# S3-compatible object storage
s3:
  enabled: true
  auth:
    accessKeyId: ****
    secretAccessKey: ****
  region: eu-west-1
  bucketName: openproject
  endpoint: ***
  host: ***
  pathStyle: false
  signatureVersion: 4
  enableSignatureV4Streaming: false
  directUploads: true

environment: 
  OPENPROJECT_HTTPS: true
  OPENPROJECT_EMAIL__DELIVERY__METHOD: "smtp"
  OPENPROJECT_SMTP__ADDRESS: "***"
  OPENPROJECT_SMTP__PORT: "25"
  OPENPROJECT_SMTP__DOMAIN: "***"
  OPENPROJECT_SMTP__AUTHENTICATION: "none"
  OPENPROJECT_FOG_CREDENTIALS_PORT: 9000

openproject:
  admin_user:
    password: "admin"
    password_reset: "true"
    name: "****"
    mail: "****"
  useTmpVolumes: true
  

postgresql:
  bundled: true
  global:
    containerSecurityContext:
      enabled: true
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - "ALL"
      seccompProfile:
        type: "RuntimeDefault"
      readOnlyRootFilesystem: true
      runAsNonRoot: true
  auth:
    username: "openproject"
    database: "openproject"
    password: "***"
    postgresPassword: "****"

You see, I have a running MinIO instance visible from the OP instance but I think my problem is unrelated to the s3 storage itself but a permission issue with ruby and the temp folder. When i attach a file to a User Story for example, I can see the following logs in the web pod:

openproject /usr/local/lib/ruby/3.3.0/tmpdir.rb:39:in `block in tmpdir': system temporary path is world-writable: /tmp (StructuredWarnings::StandardWarning)                                                                            │
│ openproject /usr/local/lib/ruby/3.3.0/tmpdir.rb:39:in `block in tmpdir': /tmp is world-writable: /tmp (StructuredWarnings::StandardWarning)                                                                                             │
│ openproject 2024-07-17 12:50:57 +0000 Read: #<Errno::EROFS: Read-only file system @ rb_sysopen - /app/puma20240717-42-mx299e>                                                                                                           │
│ openproject I, [2024-07-17T12:51:08.401393 #42]  INFO -- : [c90469f8-ee4a-45dc-9763-e9f73d4fcd6d] method=GET path=/health_checks/d

In the browser console, the POST to api/v3/work_packages/14/attachments shows up as a 502 Bad Gateway error:

Any suggestions, thanks so much in advance and have a great day!