Kubernetes Job不识别Pod中的fsGroup

Question

我尝试将fsGroup添加到Job中，但没有运气，生成的Pod在安全上下文中不包括fsGroup。Kube Job是否允许指定fsGroup，然后将其传播到生成的Pod?

Answer 1

我使用Kubernetes 1.4，并成功地创建了一个与fsGroup的作业。也许你把fsGroup放货单了?这是我的清单:

apiVersion: batch/v1
kind: Job
metadata:
  name: hello-world
spec:
  template:
    metadata:
      name: hello-world
    spec:
      containers:
        - name: hello-world-container
          image: hello-world
      securityContext:
        fsGroup: 1234
      restartPolicy: OnFailure

kubectl describe job hello-world输出:

  FirstSeen LastSeen    Count   From            SubobjectPath   Type        Reason          Message
  --------- --------    -----   ----            -------------   --------    ------          -------
  4m        4m      1   {job-controller }           Normal      SuccessfulCreate    Created pod: hello-world-yzyz7

kubectl get pod hello-world-yzyz7 -o yaml | grep fsGroup输出:

    fsGroup: 1234