diff --git a/pages/k8s/storage.md b/pages/k8s/storage.md index d6c54505..53f097d5 100644 --- a/pages/k8s/storage.md +++ b/pages/k8s/storage.md @@ -72,6 +72,25 @@ juju add-relation ceph-fs ceph-mon **Charmed Kubernetes** will then deploy the CephFS provisioner pod and create a `cephfs` storage class in the cluster. +
+Note:
+Due to an upstream issue, containers running as a non-root user with a ReadWriteMany (RWX) CephFS volume
+will not be able to write to the mounted directory. This will be fixed with the next release after the
+next OpenStack charms release. In the meantime, you can work around this by adding a simple initContainer
+to your pod to adjust the mounted volume permissions, such as:
+
+initContainers:
+ - name: fix-cephfs-rwx-volume-perm
+ securityContext:
+ runAsUser: 0
+ image: ubuntu # or whatever image your pod is using
+ volumeMounts:
+ - name: shared-data # adjust volume name and mountPath
+ mountPath: /data # to match your pod spec
+ command: ['chmod', '0777', '/data']
+
+