Use who am i and other improvements #98
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Collaborator
venkatsc
commented
Feb 3, 2025
•
venkatsc
commented
- Use whoAmI api to dertermine user from the authentication context
- Improve shared volume feature (still only Quobyte SUPER_USER can delete shared volume PVs)
- Mount /etc/passwd and /etc/group into Quobyte CSI driver pods. Also, add the same to Quobyte client deployment example definition.
Shared volume(s) is/are supposed to be accessed by all the pods for creation and deletion of pvc inside it. Therefore, should have open access (1777), and each pvc is created with (1700). These default permissions ensure access to shared volume and limited access to PVC inside it. These shared volume permissions only apply, if user does not create shared volume by themselves (and do not change permissions via client). For, PVC that is created inside shared volume, the default permissions can be overridden by storage class "accessMode:". However, it is advised to set sticky bit and user:group (1xx0) permissions only and leave out others permissions (set to 0).
..get user/group from the current user using Quobyte API
.. and add comment about optional user/group.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.