From 59567df7d426bbc80bb4afa6269a3c0807111de0 Mon Sep 17 00:00:00 2001 From: Timo Reimann Date: Fri, 30 Oct 2020 17:17:13 +0100 Subject: [PATCH] Set default fstype to fix fsGroup usage The provisioner sidecar v2 dropped setting a default file-system type. When we upgraded, we did not set it explicitly because our driver already handles the case where no file-system is specified. As it turns out, however, the kubelet gates the application of the fsGroup security context parameter setting the file permissions of a volume on the available of a file-system at the time the PV is created and otherwise ignores it. We restore proper functionality of fsGroup by setting the default file-system type to ext4. --- CHANGELOG.md | 2 ++ deploy/kubernetes/releases/csi-digitalocean-dev/driver.yaml | 1 + 2 files changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5535b7c3..aecd5f1d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,7 @@ ## unreleased +* Fix fstype usage + [[GH-362]](https://github.com/digitalocean/csi-digitalocean/pull/362) * Match csi-provisioner RBAC rules with upstream [[GH-360]](https://github.com/digitalocean/csi-digitalocean/pull/360) diff --git a/deploy/kubernetes/releases/csi-digitalocean-dev/driver.yaml b/deploy/kubernetes/releases/csi-digitalocean-dev/driver.yaml index c7e86a4e..a51b2c91 100644 --- a/deploy/kubernetes/releases/csi-digitalocean-dev/driver.yaml +++ b/deploy/kubernetes/releases/csi-digitalocean-dev/driver.yaml @@ -79,6 +79,7 @@ spec: image: quay.io/k8scsi/csi-provisioner:v2.0.2 args: - "--csi-address=$(ADDRESS)" + - "--default-fstype=ext4" - "--v=5" env: - name: ADDRESS