Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CSI] fix mounting with provided group id #2091

Open
tpashkin opened this issue Sep 20, 2024 · 0 comments
Open

[CSI] fix mounting with provided group id #2091

tpashkin opened this issue Sep 20, 2024 · 0 comments

Comments

@tpashkin
Copy link
Collaborator

We advertise VOLUME_MOUNT_GROUP capability, so NodePublishVolume.volume_capability.volume_mount_group is set to securityContext.fsGroup. Problem is, we only change gid of the files, but accourding to spec we also need to pass gid to the mount command and give group members rw access

    // If SP has VOLUME_MOUNT_GROUP node capability and CO provides
    // this field then SP MUST ensure that the volume_mount_group
    // parameter is passed as the group identifier to the underlying
    // operating system mount system call, with the understanding
    // that the set of available mount call parameters and/or
    // mount implementations may vary across operating systems.
    // Additionally, new file and/or directory entries written to
    // the underlying filesystem SHOULD be permission-labeled in such a
    // manner, unless otherwise modified by a workload, that they are
    // both readable and writable by said mount group identifier.
    // This is an OPTIONAL field.
    string volume_mount_group = 3;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant