[GitHub] [solr-operator] HoustonPutman commented on issue #523: Permissions problem with pvc block device

["HoustonPutman (via GitHub)" <gi...@apache.org>]

HoustonPutman commented on issue #523:
URL: https://github.com/apache/solr-operator/issues/523#issuecomment-1458501425

   > May be it can be related with our block storage CSI plugin, it comes always with root:root at default when it mounted.
   
   Yeah that seems like an issue for sure.
   
   It looks like the new SecurityContext feature will allow for better changing of permissions for volumes: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods
   
   And the [Huawei CSI Driver](https://github.com/Huawei/eSDK_K8S_Plugin/blob/2fd90dfe15656974f8f479ee6efa58082be0d5a6/csi/driver/node.go#L250) does not implement the [VOLUME_MOUNT_GROUP](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#delegating-volume-permission-and-ownership-change-to-csi-driver) NodeServiceCapability which seems to be a good thing.
   
   So maybe we just need to use the new SecurityContext feature, though it will be hard for me to test this.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org