Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Make File System Root Permission Configurable #1074

@daichimukai

Description

@daichimukai

What should the feature do:

The topolvm-node currently sets the file system permissions to 2777 when mounting via NodePublishVolume. While this was necessary for using the file system with non-root containers without using fsGroup, this permission setting may not be appropriate from a security standpoint. It would be beneficial to make the permissions configurable.

One possible implementation is to add a configuration option to the parameters of the StorageClass. If specified, this option would be used. To maintain compatibility, it is desirable to keep the default behavior unchanged for the time being.

What is use case behind this feature:

Set the file system root permission to 0770 to secure the mount point.


Original Discussion: #1065

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions