Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add custom file permissions for cStor ala the Dynamic NFS Provisioner #421

Open
dborman-hpe opened this issue Mar 29, 2022 · 0 comments
Open

Comments

@dborman-hpe
Copy link

We are having a push to run as many containers as possible as non-root. I was converting a non-root pod from a CephFS PVC to an OpenEBS/cStor PVC, but the root of the PVC is root:root 0755, which means the non-root container cannot create files.

I was able to get this working by adding:
securityContext:
fsGroup: 65534
runAsUser: 65534
to the pod specification. With this the container is still running as non-root, but kubernetes changes the group owner/permissions in the PVC to the specified group, and then the container can create files.

It would be nice to be able to set the ownership and/or permissions on the root directory of the PVC when it is created.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant