Skip to content

Add support for FSGroupChangePolicy in kubernetes.pod_security_context

Edward Kaplan requested to merge tedtocks/gitlab-runner:main into main
  • Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA

What does this MR do?

Add support for the fsGroupChangePolicy setting for Kubernetes runners.

Why was this MR needed?

By default, the fsGroup setting will recursively check and change permissions for a mounted PVC. This can be expensive for large volumes. Setting OnRootMismatch can speed up pod creation.

What's the best way to test this MR?

What are the relevant issue numbers?

#37876

Edited by 🤖 GitLab Bot 🤖

Merge request reports