Helm: Skip recursive permission change (#1744)

Skip recursive permission change
minio · Aug 29, 2023 · daa32d3 · daa32d3
1 parent 0f68876
commit daa32d3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/helm/tenant/values.yaml b/helm/tenant/values.yaml
@@ -66,11 +66,15 @@ tenant:
       affinity: { }
       ## Configure resource requests and limits for MinIO containers
       resources: { }
-      ## Configure security context
+      ## Configure Pod's security context
+      ## We recommend to skip the recursive permission change by using
+      ## fsGroupChangePolicy as OnRootMismatch because it can be pretty
+      ## expensive for larger volumes with lots of small files.
       securityContext:
         runAsUser: 1000
         runAsGroup: 1000
         fsGroup: 1000
+        fsGroupChangePolicy: "OnRootMismatch"
         runAsNonRoot: true
       ## Configure container security context
       containerSecurityContext: