You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
kernel and arch: Linux 5.12.19-300.fc34.x86_64 x86_64 x86_64 x86_64 GNU/Linux
OS: Fedora CoreOS 34
Selinux disabled completely
Cluster Configuration:
Single standalone node (server + agent all in one)
Describe the bug:
Permissions appear to be incorrect on PVC's created with local path provisioner. On v1.21.3 I see the PVC directories under /var/lib/rancher/k3s/storage created with 0700 and owned by root. On v1.20.9 I see the PVC directories under /var/lib/rancher/k3s/storage created with 0777. The 0700 permission forbids non-root users from writing any data to these PVC directories when they're mounted into containers where as the old 0777 permissions allowed non-root users to write immediately without any further configuration
Steps To Reproduce:
Install k3s binary for v1.21.3 in /usr/local/bin and run k3s systemd unit as follows:
Expected behavior:
Should have same behaviour as 1.20.9 (non-root users should be able to write to a PVC created by local-path provisioner without any additional work)
Actual behavior:
Not possible in 1.21.3. Need to chmod the PVC directory as 0777 before that is possible (or chown with the container user id)
Additional context / logs:
Backporting
Needs backporting to older releases
The text was updated successfully, but these errors were encountered:
Environmental Info:
K3s Version:
Node(s) CPU architecture, OS, and Version:
Linux 5.12.19-300.fc34.x86_64 x86_64 x86_64 x86_64 GNU/Linux
Cluster Configuration:
Describe the bug:
Permissions appear to be incorrect on PVC's created with local path provisioner. On v1.21.3 I see the PVC directories under
/var/lib/rancher/k3s/storage
created with 0700 and owned by root. On v1.20.9 I see the PVC directories under/var/lib/rancher/k3s/storage
created with 0777. The 0700 permission forbids non-root users from writing any data to these PVC directories when they're mounted into containers where as the old 0777 permissions allowed non-root users to write immediately without any further configurationSteps To Reproduce:
/usr/local/bin
and run k3s systemd unit as follows:Expected behavior:
Should have same behaviour as 1.20.9 (non-root users should be able to write to a PVC created by local-path provisioner without any additional work)
Actual behavior:
Not possible in 1.21.3. Need to chmod the PVC directory as 0777 before that is possible (or chown with the container user id)
Additional context / logs:
Backporting
The text was updated successfully, but these errors were encountered: