Merge pull request #362 from denisok/change_driver_fsGroupPolicy

k8s-ci-robot · web-flow · commit 1be76feebc2d · 2022-07-09T11:01:46.000-07:00
Allow Kubernetes to change permission of provisioned volumes
diff --git a/deploy/kubernetes-1.21-test/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-1.21-test/hostpath/csi-hostpath-driverinfo.yaml
@@ -15,3 +15,6 @@ spec:
   # To determine at runtime which mode a volume uses, pod info and its
   # "csi.storage.k8s.io/ephemeral" entry are needed.
   podInfoOnMount: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
diff --git a/deploy/kubernetes-1.21/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-1.21/hostpath/csi-hostpath-driverinfo.yaml
@@ -15,3 +15,6 @@ spec:
   # To determine at runtime which mode a volume uses, pod info and its
   # "csi.storage.k8s.io/ephemeral" entry are needed.
   podInfoOnMount: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
diff --git a/deploy/kubernetes-distributed/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-distributed/hostpath/csi-hostpath-driverinfo.yaml
@@ -18,3 +18,6 @@ spec:
   # No attacher needed.
   attachRequired: false
   storageCapacity: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
