Openshift (kubernetes) PV - no write permission

[maciejlesny]

Hi,
I've been looking for possibility adding Ceph to Openshift 4.9 as persistent volume for containers. Everything works great, except mount point has "drwxr-xr-x" (755) permissions. Openshift doesn't allow root user inside containers. I cannot chown/chmod mounted point.
I've tried Ceph RBD and CephFS (filesystems).

Is there any way to set default permissions to 777?

[Madhu-1]

setting 777 on both cephfs and rbd mounts are removed in cephcsi, Have you considered setting SecurityContext: in both pod spec and container spec?

ceph-csi/e2e/utils.go

Lines 515 to 537 in 3ddec80

	var user int64 = 2000
	app := &v1.Pod{
	TypeMeta: metav1.TypeMeta{
	Kind: "Pod",
	APIVersion: "v1",
	},
	ObjectMeta: metav1.ObjectMeta{
	Name: "pod-run-as-non-root",
	Namespace: f.UniqueName,
	Labels: map[string]string{
	"app": "pod-run-as-non-root",
	},
	},
	Spec: v1.PodSpec{
	SecurityContext: &v1.PodSecurityContext{FSGroup: &user},
	Containers: []v1.Container{
	{
	Name: "write-pod",
	Image: "quay.io/centos/centos:latest",
	Command: []string{"/bin/sleep", "999999"},
	SecurityContext: &v1.SecurityContext{
	RunAsUser: &user,
	},

[maciejlesny]

I'm looking for persistent volume solution which will work without modification deployments/pods. So using openshift with ceph-csi is not possible, am I right?

[Madhu-1]

I'm looking for persistent volume solution which will work without modification deployments/pods. So using openshift with ceph-csi is not possible, am I right?

AFAIK Without modifying pod/deployment spec not possible