elixir-cloud-aai/TESK

permission denied on PV files in TESK tasks

Opened this issue · 0 comments

Hi,

in k8s, privileges are not managed in the same way as in openshift and if a pod needs to access files on PV, additional setup to containers needs to be done like this:
initContainers:
- name: volume-permissions
image: busybox
imagePullPolicy: {{ .Values.mongodb.pullPolicy | quote }}
command: ["chown", "-R", "{{ .Values.mongodb.securityContext.runAsUser }}:{{ .Values.mongodb.securityContext.fsGroup }}", "{{ .Values.mongodb.mountPath }}"]
securityContext:
runAsUser: 0
volumeMounts:
- name: mongodb-data
mountPath: {{ .Values.mongodb.mountPath }}

as task containers are managed by TESK-api pod, it is something that needs to be fixed in TESK.

Otherwise, tasks are failing with e.g.:
[bwa_index] Pack FASTA... [bns_fasta2bntseq] fail to open file '/ZTTROm/hs37d5.fa.pac' : Permission denied