Explore setting volume permission and ownership at cephcsi level

[Madhu-1]

https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#delegating-volume-permission-and-ownership-change-to-csi-driver mentioned that a csi driver can hable volume permission and the ownership on this own, this can improve the pod startup time and avoid the recursive chmod/chown at kubelet level

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in a week if no further activity occurs. Thank you for your contributions.

[github-actions]

This issue has been automatically closed due to inactivity. Please re-open if this still requires investigation.

[manishym]

/assign

[github-actions]

Thanks for taking this issue! Let us know if you have any questions!

[Madhu-1]

Few tasks I can think of to complete this work

• Test read/write operation using pod
• Enable external test for cephfs/rbd

  ceph-csi/scripts/k8s-storage/driver-cephfs.yaml

  Line 37 in 66f71ae

  fsGroup: false

  https://github.com/kubernetes/kubernetes/blob/d9c54f69d4bb7ae1bb655e1a2a50297d615025b5/test/e2e/storage/framework/testdriver.go#L154-L155C25
• Upgrade test
• setting groups at different levels in pod yaml (one is at pod level and another is at container level)
• Test it with openshift
• Add E2E tests and validate the group
• Add it to the Pending release note