GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Operator PVC mount use fails in namespaces w/ privileged Pod security · Issue #5324 · feast-dev/feast Closed Labels DescriptionExpected BehaviorWith the following FeatureStore spec: feastProject: my_project services: offlineStore: persistence: file: pvc: create: {} mountPath: /offline Current BehaviorPod goes into Creating feast repository...
feast init my_project
bash: line 3: /offline/my_project/feature_repo/feature_store.yaml: Permission denied
Feast repo creation completeonline container - Can't find feature repo configuration file at /offline/my_project/feature_repo/feature_store.yaml. Make sure you're running feast from an initialized feast repository.The issue is that the resulting mount is owned by root and does not offer group write permissions. $ id
uid=1001(default) gid=0(root) groups=0(root)
$ ls -la /offline
total 24
drwxr-xr-x. 4 root root 4096 May 6 13:42 .
dr-xr-xr-x. 1 root root 61 May 6 13:52 ..
drwx------. 2 root root 16384 May 6 13:42 lost+found
drwxr-xr-x. 3 root root 4096 May 6 13:42 my_projectSteps to reproduce
$ kubectl get ns default -oyaml
apiVersion: v1
kind: Namespace
metadata:
annotations:
openshift.io/sa.scc.mcs: s0:c1,c0
openshift.io/sa.scc.supplemental-groups: 1000000000/10000
openshift.io/sa.scc.uid-range: 1000000000/10000
creationTimestamp: "2025-05-01T02:05:22Z"
labels:
kubernetes.io/metadata.name: default
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/warn: privileged
name: default
apiVersion: feast.dev/v1alpha1 kind: FeatureStore metadata: name: sample spec: feastProject: my_project services: offlineStore: persistence: file: pvc: create: {} mountPath: /offline Specifications
Possible SolutionAdd ability to set the Activity
MetadataMetadataAssigneesLabelsTypeProjectsMilestoneRelationshipsDevelopmentIssue actions |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |