github/minio
4
0 Fork 0
mirror of https://github.com/minio/minio.git synced 2026-11-05 08:30:17 +00:00
Code Issues Releases Wiki Activity

add filesystem group change policy for large minio deployments (#14528)

Browse Source 
* add group change policy for large MinIO deployments
* Added Kubernetes version > 1.20 check for applying the proposed change
This commit is contained in:
Vijay Dharap authored and GitHub committed 2022-03-11 14:21:58 -08:00
1 parent 80039f60d5
commit 47d4fabb58
3 files changed
+7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

helm/minio/templates/deployment.yaml
+3
View File
@@ -60,6 +60,9 @@ spec:
runAsUser: {{ .Values.securityContext.runAsUser }}
runAsGroup: {{ .Values.securityContext.runAsGroup }}
fsGroup: {{ .Values.securityContext.fsGroup }}
{{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor 20) }}
fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }}
{{- end }}
{{- end }}
{{ if .Values.serviceAccount.create }}
serviceAccountName: {{ .Values.serviceAccount.name }}
helm/minio/templates/statefulset.yaml
+3
View File
@@ -87,6 +87,9 @@ spec:
runAsUser: {{ .Values.securityContext.runAsUser }}
runAsGroup: {{ .Values.securityContext.runAsGroup }}
fsGroup: {{ .Values.securityContext.fsGroup }}
{{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor 20) }}
fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }}
{{- end }}
{{- end }}
{{ if .Values.serviceAccount.create }}
serviceAccountName: {{ .Values.serviceAccount.name }}
helm/minio/values.yaml
+1
View File
@@ -237,6 +237,7 @@ securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: "OnRootMismatch"
# Additational pod annotations
podAnnotations: {}