From 7bc154166513708548a93f6b8311c020f0847fa1 Mon Sep 17 00:00:00 2001 From: Giovanni Ferri Date: Sat, 25 Jul 2026 00:51:34 +0100 Subject: [PATCH] fix: drop csi-driver-nfs mountPermissions 0777; rely on fsGroup CSIDriver fsGroupPolicy=File already chowns each volume to the pod's fsGroup (verified: non-root pod with fsGroup writes fine, dir becomes root: drwxrwsr-x). World-writable 0777 was unnecessary and sloppy. Apps (Harbor) set fsGroup. --- values/base/csi-driver-nfs.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/values/base/csi-driver-nfs.yaml b/values/base/csi-driver-nfs.yaml index eb7f678..ff938a6 100644 --- a/values/base/csi-driver-nfs.yaml +++ b/values/base/csi-driver-nfs.yaml @@ -12,7 +12,6 @@ storageClass: parameters: server: 10.10.210.59 share: /mnt/user/unraid-talos-pv-store - mountPermissions: "0777" # non-root pods (PSA restricted) must write the subdir reclaimPolicy: Retain # registry data — keep backing dir on PVC delete volumeBindingMode: Immediate mountOptions: