Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-3313

`pod.spec.securityContext.fsGroupChangePolicy` value should be `OnRootMismatch` by default

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Major Major
    • None
    • openshift-4.8
    • Storage
    • None
    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request
         `pod.spec.securityContext.fsGroupChangePolicy` value should be `OnRootMismatch` by default
         
      2. What is the nature and description of the request?
         Avoid unnecessary recursive file ownership change.   The file ownership change should be conditional if the permissions and ownership are matching with as expected then alogrithm should not perform permission change.

      3. Why does the customer need this? (List the business requirements here)
         In the case of pods using Persistent Volumes with high file counts, the pod fails with CreateContainerError as it takes much time to perform a recursive file ownership change.
         Since the `pod.spec.securityContext.fsGroupChangePolicy` value is set to `Always` by default, it always performs permission change even when it is not required.   

      4. List any affected packages or components.
      APIServer, Pod

       

       

       

            rh-gs-gcharot Gregory Charot
            rhn-support-dpateriy Divyam Pateriya
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: