HoustonPutman commented on issue #523: URL: https://github.com/apache/solr-operator/issues/523#issuecomment-1458501425
> May be it can be related with our block storage CSI plugin, it comes always with root:root at default when it mounted. Yeah that seems like an issue for sure. It looks like the new SecurityContext feature will allow for better changing of permissions for volumes: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods And the [Huawei CSI Driver](https://github.com/Huawei/eSDK_K8S_Plugin/blob/2fd90dfe15656974f8f479ee6efa58082be0d5a6/csi/driver/node.go#L250) does not implement the [VOLUME_MOUNT_GROUP](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#delegating-volume-permission-and-ownership-change-to-csi-driver) NodeServiceCapability which seems to be a good thing. So maybe we just need to use the new SecurityContext feature, though it will be hard for me to test this. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
