Chown/chmod have no effect on Blob mounted on AKS Pods

[NattyPradeep]

Hello,

We mounted the blob storage as volume mount and we can't change the permissions from "root" to other accounts. What can be done to resolve the issue?. From AKS Pod we are not able to access the volume mount path.

[andyzhangx]

mountPermissions is only for NFS volume. what's your volume type, by default it's blobfuse.

mountPermissions	mounted folder permissions. The default is 0777, if set as 0, driver will not perform chmod after mount	0777	No

[andyzhangx]

here is the nfs protocol storage class example:
https://github.com/kubernetes-sigs/blob-csi-driver/blob/02ba84f85e6ac1ff153a7648297a91425e1db7ed/deploy/example/storageclass-blob-nfs.yaml

[NattyPradeep]

so on nfs, we should be able to change the permission on these mounts?

[andyzhangx]

yes, of course

[NattyPradeep]

If you can confirm these are the changes. will deploy and try out these changes.

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: atarifeedlistener-sc-blob
provisioner: blob.csi.azure.com
allowVolumeExpansion: true
mountOptions:
  - nconnect=8
parameters:
  protocol: nfs
  skuName: Standard_LRS
  location: East US
  storageAccount: cordeausecmsa
  resourceGroup: cor-d-eaus-ecm-dctm-rg
  containerName: emft-jobs
reclaimPolicy: Retain
volumeBindingMode: Immediate
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: atarifeedlistener-pvc-blob
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 10Gi
  storageClassName: atarifeedlistener-sc-blob  

[andyzhangx]

the config lgtm, pls note that since you are bring your own storage account, pls follow this guide and make sure the container name emft-jobs exists: https://github.com/kubernetes-sigs/blob-csi-driver/tree/master/deploy/example/nfs#prerequisite