search

microsoft / K8s-Storage-Plugins

Storage plugins for Kubernetes
MIT License
42 stars 20 forks source link

Formatting iSCSI volumes produces only administrator access #11

Closed KnicKnic closed 5 years ago

KnicKnic commented 5 years ago

When formatting an iSCSI volume. The root of the drive should get re-ACL'd such that it allows all users to create data. Normally the inherit ACE has this, it is just not there for the root ACE.

First seen in issue https://github.com/microsoft/K8s-Storage-Plugins/issues/9

See https://stackoverflow.com/questions/6622124/why-does-set-acl-on-the-drive-root-try-to-set-ownership-of-the-object for a discussion on setting drive acl's from powershell.

Notes about fix.

  1. Should go before removal of format SCSI PR.
  2. Should check if volume is empty incase volume came preformatted with user specified data.
  3. Should ensure if volume exists to retry if no format was done, and no exclusive / readonly PR is on the disk