-
Notifications
You must be signed in to change notification settings - Fork 1k
Description
While a new cluster will initialize, any existing cluster or rather any event that causes the pods to recreate causes the following permissions issue preventing the cluster from initializing:
2020-02-07T19:33:14.507810141Z 2020-02-07 19:33:14 UTC [1023]: [1-1] 5e3dbb7a.3ff 0 FATAL: data directory "/home/postgres/pgdata/pgroot/data" has invalid permissions
2020-02-07T19:33:14.50784768Z 2020-02-07 19:33:14 UTC [1023]: [2-1] 5e3dbb7a.3ff 0 DETAIL: Permissions should be u=rwx (0700) or u=rwx,g=rx (0750).
Additionally, you're unable to access a shell via kubectl as the pod is running outside the root user.
$ kubectl -n pg exec -it bash
"root" execution of the PostgreSQL server is not permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromise. See the documentation for
more information on how to properly start the server.
command terminated with exit code 1