nfs

Author: wangzheng422

redhat/ocp4/4.18/2025.07.nfs.fsgroup.md

@@ -367,6 +367,10 @@ kind: Pod
 metadata:
   name: primary-pod
 spec:
+  securityContext:
+    fsGroup: 2002
+    seccompProfile:
+      type: RuntimeDefault
   containers:
   - name: primary-container
     image: registry.access.redhat.com/ubi8/ubi-minimal # Using a non-root UBI image
@@ -384,7 +388,7 @@ spec:
     securityContext:
       runAsUser: 1001
       runAsGroup: 2002
-      fsGroup: 2002 # Ensure fsGroup matches GID
+      # fsGroup: 2002 # Ensure fsGroup matches GID
     volumeMounts:
     - name: nfs-storage
       mountPath: /data
@@ -500,6 +504,10 @@ metadata:
   name: dr-pod
   namespace: demo
 spec:
+  securityContext:
+    fsGroup: 2002
+    seccompProfile:
+      type: RuntimeDefault
   containers:
   - name: dr-container
     image: registry.access.redhat.com/ubi8/ubi-minimal # Also using a UBI image
@@ -521,7 +529,7 @@ spec:
     securityContext:
       runAsUser: 1001
       runAsGroup: 2002
-      fsGroup: 2002 # Ensure fsGroup matches GID
+      # fsGroup: 2002 # Ensure fsGroup matches GID
     volumeMounts:
     - name: nfs-storage
       mountPath: /data