github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Addresses nitpicks for FSGroupPolicy

Browse Source
This commit is contained in:
Christian Huffman
2020-07-17 12:24:08 -04:00
parent f137c47770
commit 3bcf407d2f
9 changed files with 84 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
pkg/apis/storage/types.go
View File

@@ -283,11 +283,13 @@ type CSIDriverSpec struct {
// Defines if the underlying volume supports changing ownership and
// permission of the volume before being mounted.
// Refer to the specific FSGroupPolicy values for additional details.
// This field is alpha-level, and is only honored by servers
// This field is beta, and is only honored by servers
// that enable the CSIVolumeFSGroupPolicy feature gate.
//
// This field is immutable.
//
// Defaults to ReadWriteOnceWithFSType, which will use heuristics to
// determine if Kubernetes should modify ownership and permissions of the volume.
// +optional
FSGroupPolicy *FSGroupPolicy
@@ -415,10 +417,11 @@ const (
ReadWriteOnceWithFSTypeFSGroupPolicy FSGroupPolicy = "ReadWriteOnceWithFSType"
// FileFSGroupPolicy indicates that CSI driver supports volume ownership
// and permission change via fsGroup, and Kubernetes may use fsGroup
// to change permissions and ownership of the volume to match user requested fsGroup in
// and permission change via fsGroup, and Kubernetes will change the permissions
// and ownership of every file in the volume to match the user requested fsGroup in
// the pod's SecurityPolicy regardless of fstype or access mode.
// This mode should be defined if the fsGroup is expected to always change on mount
// Use this mode if Kubernetes should modify the permissions and ownership
// of the volume.
FileFSGroupPolicy FSGroupPolicy = "File"
// NoneFSGroupPolicy indicates that volumes will be mounted without performing