On CircleCI EventuateKafkaNativeContainer fails to start with /opt/kafka/config/ not writable

[cer]

===> User
uid=1000(appuser) gid=1000(appuser)
===> Setting default values of environment variables if not already set.
===> Configuring ...
Running in KRaft mode...
/opt/kafka/config/ file not writable

[cer]

This is bizzare.

Executed commands in the container before it starts Kafka:

$ ls -ltd /opt/kafka/config/

drwxrwxr-x    2 appuser  root          4096 Jul 23 09:00 /opt/kafka/config/

$ id

uid=1000(appuser) gid=1000(appuser)

$ sh -c '[[ -w /opt/kafka/config/ ]] && echo yes

yes

The kafka startup script also has the same identity:

06:01:45.869 [Test worker] ERROR tc.apache/kafka-native:latest - Log output from the failed container:

uid=1000(appuser) gid=1000(appuser)
===> User
uid=1000(appuser) gid=1000(appuser)
===> Setting default values of environment variables if not already set.
===> Configuring ...
Running in KRaft mode...
/opt/kafka/config/ file not writable

The only difference with running locally is that the id command output includes `groups=...".

[cer]

Running on CircleCI:

======== Command sh -c [[ -w /opt/kafka/config/ ]] && echo yes :  -> 
ExitCode=0
Stdout=yes

Stderr=
======== Command bash -c [[ -w /opt/kafka/config/ ]] && echo yes :  -> 
ExitCode=1
Stdout=
Stderr=

vs.

Running on Mac or Git Actions:

======== Command sh -c [[ -w /opt/kafka/config/ ]] && echo yes :  -> 
ExitCode=0
Stdout=yes

Stderr=
======== Command bash -c [[ -w /opt/kafka/config/ ]] && echo yes :  -> 
ExitCode=0
Stdout=yes