Skip to main content

NFS_FSGROUP_WARNING

Constant NFS_FSGROUP_WARNING 

Source
pub const NFS_FSGROUP_WARNING: &str = "NFS filesystem repo: fsGroup is ignored on NFS — \
     grant the mover write access via moverDefaults.podSecurityContext.supplementalGroups \
     (with a group-writable export), securityContext.runAsUser, or NAS-side Mapall";
Expand description

The actionable admission warning for an inline-NFS filesystem repo whose moverDefaults grant write access only via fsGroup. fsGroup is silently ignored on NFS (the kubelet doesn’t recursively chown in-tree NFS mounts), so the mover/server/bootstrap reach the export as the unprivileged uid and the repo connect/create fails with permission denied. Non-blocking (a user fixing it NAS-side via Mapall can ignore it). Kept short for the admission response (kube truncates very long warnings).