pub const NFS_FSGROUP_WARNING: &str = "NFS filesystem repo: fsGroup is ignored on NFS — \
grant the mover write access via moverDefaults.podSecurityContext.supplementalGroups \
(with a group-writable export), securityContext.runAsUser, or NAS-side Mapall";Expand description
The actionable admission warning for an inline-NFS filesystem repo whose
moverDefaults grant write access only via fsGroup. fsGroup is silently
ignored on NFS (the kubelet doesn’t recursively chown in-tree NFS mounts), so
the mover/server/bootstrap reach the export as the unprivileged uid and the
repo connect/create fails with permission denied. Non-blocking (a user
fixing it NAS-side via Mapall can ignore it). Kept short for the admission
response (kube truncates very long warnings).