#security-context

Our non-root pod could not write to its own volume: runAsUser, fsGroup and slow mounts

After we made a service run as a non-root user, it crashed on start with permission denied writing to its persistent volume. Adding fsGroup fixed that, then pods on a large volume took nine minutes to start. How volume ownership works in Kubernetes, fsGroupChangePolicy, and when an init container is the better tool.