kubernetes-csi / csi-driver-smb / 10848904027

79%

master: 80%

Pull #848

github

fix: mount options for fsGroup delegation must ensure RWX for the group

If user sets `fsGroup: <gid>` in Pod's spec.securityContext, kubelet delegate fsGroup to CSI Driver, and NodeStageVolume() adds `gid=<gid>` to mount options. This might be not enough to make volume writable for the user:
```
$ kubectl exec fedora -- ls -ld /mnt/claim
drwxr-xr-x. 2 root 1002 0 Sep 13 12:04 /mnt/claim
$ kubectl exec fedora -- touch /mnt/claim/FILE
touch: cannot touch '/mnt/claim/FILE': Permission denied
```
See https://github.com/kubernetes-csi/csi-driver-smb/issues/835

0 of 20 new or added lines in 1 file covered. (0.0%)

980 of 1261 relevant lines covered (77.72%)

4.44 hits per line