Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: mount options for fsGroup delegation must ensure RWX for the group #848

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix: mount options for fsGroup delegation must ensure RWX for the group #848

wants to merge 1 commit into from

Commits on Sep 13, 2024

  1. fix: mount options for fsGroup delegation must ensure RWX for the group 

    If user sets `fsGroup: <gid>` in Pod's spec.securityContext, kubelet delegate fsGroup to CSI Driver, and NodeStageVolume() adds `gid=<gid>` to mount options. This might be not enough to make volume writable for the user:
```
$ kubectl exec fedora -- ls -ld /mnt/claim
drwxr-xr-x. 2 root 1002 0 Sep 13 12:04 /mnt/claim
$ kubectl exec fedora -- touch /mnt/claim/FILE
touch: cannot touch '/mnt/claim/FILE': Permission denied
```
See kubernetes-csi#835
    @mpatlasov
    mpatlasov committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    b5b4ae3 View commit details
    Browse the repository at this point in the history