Open mossroy opened 3 months ago
The Kubernetes project currently lacks enough contributors to adequately respond to all issues.
This bot triages un-triaged issues according to the following rules:
lifecycle/stale
is appliedlifecycle/stale
was applied, lifecycle/rotten
is appliedlifecycle/rotten
was applied, the issue is closedYou can:
/remove-lifecycle stale
/close
Please send feedback to sig-contributor-experience at kubernetes/community.
/lifecycle stale
It's a stable feature of kubernetes since 1.23: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods, and very useful, especially when you run containers as non-root.
This feature does not seem to be supported by nfs-subdir-external-provisioner.
Here is a test-case:
touch test
, see its owner/group withls -ln test
ls -ln test
if the group has been changed to the one specified in fsGroup (70 in my example below)Example manifests: