bitflicker64 commented on code in PR #544: URL: https://github.com/apache/hugegraph-doc/pull/544#discussion_r4329696652
########## content/en/docs/quickstart/hugegraph/hugegraph-helm.md: ########## @@ -230,6 +230,22 @@ helm test hugegraph -n hugegraph --logs --timeout 5m Existing explicit helper images also remain under `--reuse-values`; add `--set-string store.waitImage= --set-string server.waitImage=` to reuse component images. Adopt new defaults deliberately with `--reset-values` and a reviewed file retaining your image, credential, storage and topology settings. + +PD, Store and Server images built from current master run as UID/GID `10001`, and the chart defaults `pd.podSecurityContext` and +`store.podSecurityContext` to `fsGroup: 10001` so they can write PVCs created by older images, which ran as root. `--reuse-values` keeps an existing +release's empty value, and the default `latest` tag with `pullPolicy: Always` can pull the new image on any Pod restart, so set it explicitly first: + +```bash +helm upgrade hugegraph "$CHART" --devel -n hugegraph --reuse-values \ + --set pd.podSecurityContext.fsGroup=10001 \ + --set pd.podSecurityContext.fsGroupChangePolicy=OnRootMismatch \ + --set store.podSecurityContext.fsGroup=10001 \ + --set store.podSecurityContext.fsGroupChangePolicy=OnRootMismatch \ + --wait --timeout 15m +``` + +If a Pod still reports `Permission denied`, set `fsGroupChangePolicy: Always` for one rollout or change the owner once with `chown -R 10001:10001`; +volumes whose CSI driver ignores `fsGroup` (for example many NFS drivers) and `hostPath` volumes need that `chown` too. Review Comment: Minor: This block is inserted between "Adopt new defaults deliberately ..." and "Do not treat PD membership, storage or credential changes as ordinary independent overrides; consult the lifecycle reference.", with no blank line before the latter. That sentence used to close the `--reuse-values` paragraph; it now renders as the last sentence of this `Permission denied` / `chown` paragraph, so it reads as advice about fsGroup. The CN page has the same split (`PD 成员、持久存储和共享凭据变更需要按生命周期说明协调处理。` now follows the `chown` paragraph). Please move the new text, in both languages, below that sentence so the original paragraph stays intact. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
