-
Notifications
You must be signed in to change notification settings - Fork 865
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fsGroupChangePolicy: "OnRootMismatch"
is not set
#970
Labels
bug
Something isn't working
Comments
Did you want to send a pull request? |
As far as I can see podSecurityContextOverride:
runAsUser: 1000
fsGroup: 1000
fsGroupChangePolicy: "OnRootMismatch"
runAsNonRoot: true
supplementalGroups: [1000] |
Yes I can send a PR when I get a minute. @mohanisch-sixt I am currently using
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
This helm chart is setting
fsGroup
. WhenfsGroup
is used, most of the times unless there are reasons not to -fsGroupChangePolicy: "OnRootMismatch"
must be set. This is especially relevant for Jenkins with its CPS/survivability implementation. My Jenkins instance has 31 million xml files. To attach a volume - takes 15+ minutes, and that's super performant nvme ssd based volume. Probably could take an hour on a regular EBS or something like that.Version of Helm and Kubernetes
Chart version
irrelevant
What happened?
What you expected to happen?
No response
How to reproduce it
No response
Anything else we need to know?
No response
The text was updated successfully, but these errors were encountered: