Skip to content

Commit e02eddb

Browse files
authored
Merge pull request #38157 from codyhoag/winc-pv-note
OSDOCS-2711 PV note for Windows
2 parents bf19090 + 512c012 commit e02eddb

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

modules/nodes-containers-projected-volumes-about.adoc

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,13 @@ so that I can synthesize a single directory with various sources of information;
1212
* populate a single volume with the keys from multiple secrets, config maps, and with downward API information,
1313
explicitly specifying paths for each item, so that I can have full control over the contents of that volume.
1414

15+
[IMPORTANT]
16+
====
17+
When the `RunAsUser` permission is set in the security context of a Linux-based pod, the projected files have the correct permissions set, including container user ownership. However, when the Windows equivalent `RunAsUsername` permission is set in a Windows pod, the kubelet is unable to correctly set ownership on the files in the projected volume.
18+
19+
Therefore, the `RunAsUsername` permission set in the security context of a Windows pod is not honored for Windows projected volumes running in {product-title}.
20+
====
21+
1522
The following general scenarios show how you can use projected volumes.
1623

1724
*Config map, secrets, Downward API.*::
@@ -94,7 +101,6 @@ spec:
94101
If there are multiple containers in the pod, each container needs a `volumeMounts` section, but only one `volumes` section is needed.
95102
====
96103

97-
98104
.Pod with multiple secrets with a non-default permission mode set
99105

100106
[source,yaml]

0 commit comments

Comments
 (0)