-
Notifications
You must be signed in to change notification settings - Fork 170
Open
Description
What should the feature do:
The topolvm-node currently sets the file system permissions to 2777 when mounting via NodePublishVolume. While this was necessary for using the file system with non-root containers without using fsGroup, this permission setting may not be appropriate from a security standpoint. It would be beneficial to make the permissions configurable.
One possible implementation is to add a configuration option to the parameters of the StorageClass. If specified, this option would be used. To maintain compatibility, it is desirable to keep the default behavior unchanged for the time being.
What is use case behind this feature:
Set the file system root permission to 0770 to secure the mount point.
Original Discussion: #1065