Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Media Permission denied #52

Closed
modzilla99 opened this issue Jun 3, 2021 · 4 comments
Closed

Media Permission denied #52

modzilla99 opened this issue Jun 3, 2021 · 4 comments
Assignees
Labels
bug Something isn't working
Milestone

Comments

@modzilla99
Copy link

When provisioning the volume with NFS for RWX it will give me the permission denied error since by default the folder will be owned by "nobody".

To mitgate this a init container like this could be added:

...
  - name: init-chown
    image: busybox:1.32.1
    imagePullPolicy: IfNotPresent
    command:
    - /bin/sh
    - -c
    - chown -R 1000:1000 /mnt/media
    securityContext:
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: false
    volumeMounts:
    - mountPath: /mnt/media
      name: media
...
@bootc
Copy link
Member

bootc commented Sep 9, 2021

You should probably just set the podSecurityContext.fsGroup setting to something suitable; Kubernetes should do the rest.

@bootc bootc added the more info More information required from the reporter label Sep 9, 2021
@rjhenry
Copy link
Contributor

rjhenry commented Nov 19, 2021

See #63 - looks to be the same issue.

@bootc bootc added bug Something isn't working pending Issue is in a branch waiting for a release and removed more info More information required from the reporter labels Nov 27, 2021
@bootc
Copy link
Member

bootc commented Nov 27, 2021

The fix is indeed to set the fsGroup in the podSecurityContext. Please see #63 (comment) for how to do this in versions of the chart pre 4.0 (currently unreleased).

@bootc bootc added this to the 4.0 milestone Nov 27, 2021
@bootc bootc self-assigned this Nov 28, 2021
@bootc bootc closed this as completed in 1798875 Nov 29, 2021
@bootc bootc removed the pending Issue is in a branch waiting for a release label Nov 29, 2021
@bootc
Copy link
Member

bootc commented Nov 29, 2021

I've just released version 4.0.1 of this chart which resolves this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants