Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Setup Example Kubernetes Storage and Ensure Proper Mount Permissions #22

Open
njriasan opened this issue Jun 14, 2020 · 2 comments
Open

Comments

@njriasan
Copy link
Contributor

Kubernetes default doesn't have a volume mounted and the database container may not have the necessary permissions to use it.

@shankari
Copy link
Contributor

shankari commented Jun 15, 2020

@njriasan can you clarify this a bit more? do you mean docker containers spawned by kubernetes? kubernetes is container management software, not containerization technology, so it won't manage volumes directly, will it?

@njriasan
Copy link
Contributor Author

njriasan commented Jun 15, 2020

My understanding is that you can specify volume creations in the description for pod. It also lets you specify container permissions by associating each docker container with a security group. My understanding is that in addition to adding the volume though you also need to go through a step to ensure your container can properly access the volumes. What I read suggests that containers have user permissions and volumes mount with root:root. There may also be a permissions issue with enabling mount on this volume.

My understanding, based on this stack overflow post, is this requires 3 changes: make the dockefile creates a new usergroup for the container, add the mounted volume, and modify it to add permissions to that user group so mount succeeds.

I may also need to modify the Kubernetes implementation to use deployment files in addition to service and pod files, but I haven't fully investigated that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants