Allow Kubernetes to change permission of provisioned volumes

Denys Kondratenko · Denys Kondratenko · commit b23915ecbca5 · 2022-07-04T13:36:26.000+02:00
diff --git a/deploy/kubernetes-1.21-test/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-1.21-test/hostpath/csi-hostpath-driverinfo.yaml
@@ -15,3 +15,6 @@ spec:
   # To determine at runtime which mode a volume uses, pod info and its
   # "csi.storage.k8s.io/ephemeral" entry are needed.
   podInfoOnMount: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
diff --git a/deploy/kubernetes-1.21/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-1.21/hostpath/csi-hostpath-driverinfo.yaml
@@ -15,3 +15,6 @@ spec:
   # To determine at runtime which mode a volume uses, pod info and its
   # "csi.storage.k8s.io/ephemeral" entry are needed.
   podInfoOnMount: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
diff --git a/deploy/kubernetes-distributed/hostpath/csi-hostpath-driverinfo.yaml b/deploy/kubernetes-distributed/hostpath/csi-hostpath-driverinfo.yaml
@@ -18,3 +18,6 @@ spec:
   # No attacher needed.
   attachRequired: false
   storageCapacity: true
+  # Kubernetes may use fsGroup to change permissions and ownership 
+  # of the volume to match user requested fsGroup in the pod's SecurityPolicy
+  fsGroupPolicy: File
