Skip to content

fs_group 103 fails on pod recreate #821

@cazter

Description

@cazter

While a new cluster will initialize, any existing cluster or rather any event that causes the pods to recreate causes the following permissions issue preventing the cluster from initializing:

2020-02-07T19:33:14.507810141Z 2020-02-07 19:33:14 UTC [1023]: [1-1] 5e3dbb7a.3ff 0 FATAL: data directory "/home/postgres/pgdata/pgroot/data" has invalid permissions
2020-02-07T19:33:14.50784768Z 2020-02-07 19:33:14 UTC [1023]: [2-1] 5e3dbb7a.3ff 0 DETAIL: Permissions should be u=rwx (0700) or u=rwx,g=rx (0750).

Additionally, you're unable to access a shell via kubectl as the pod is running outside the root user.

$ kubectl -n pg exec -it bash
"root" execution of the PostgreSQL server is not permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromise. See the documentation for
more information on how to properly start the server.
command terminated with exit code 1

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions