harbor-helm will not obey runAsUser or runAsGroup

[akevinbailey]

I cannon install harbor-helm on my RKE2 cluster, because all of the persistentVolumeClaim return permission denied. Even when adding "Everyone" to the underlying storage does not help. In other Helm Chart I have set the runAsUser: 1001 and runAsGroup: 1001 and the access works. However, you the harbor-helm chart there is nowhere to do this. How do I set all the pods to use runAsUser and runAsGroup?

[MinerYang]

Hi @akevinbailey ,

Unfortunately, we don't expose any fsgroup and usergrroup since for example, we defined uid and gid in our dockerfile and helm-template at the beginning., most of the users do overwrite it while first installation , and if now we suddenly allow user to override it, it can impact upgrades if storage permissions don’t align and extra operations like owner change will be needed when initContainer. It is more like a breaking change for most of the users.

Thus, I would suggest to use helm-hook function to achieve your goal. Hope this make sense to you.

Best,
Miner