tree ac99bfa39deefe0f4aca7478077a66ef8b7c9d74
parent 1e90c6d29a4af63fa01b472b7a49bdba256797b2
author Lorenz Brun <lorenz@monogon.tech> 1708431506 +0100
committer Lorenz Brun <lorenz@monogon.tech> 1708452732 +0000

m/n/k/reconciler: set fsGroupPolicy for CSI driver

This fixes an issue where kubelet did not apply fsGroupChangePolicy due
to questionable capability detection code with the default
fsGroupPolicy. Setting this to the File policy asserts that this driver
always supports ownership changes and thus bypasses that Kubernetes
capability detection code.

Change-Id: I4799a01561af4f3d9c0de7a6040fd5f9db784d3e
Reviewed-on: https://review.monogon.dev/c/monogon/+/2784
Tested-by: Jenkins CI
Reviewed-by: Tim Windelschmidt <tim@monogon.tech>