fluid-cloudnative · cheyang · Dec 21, 2023 · Dec 18, 2023
diff --git a/charts/alluxio/CHANGELOG.md b/charts/alluxio/CHANGELOG.md
@@ -249,4 +249,7 @@
 
 0.9.12
 
-- Add `sidecar.istio.io/inject` to components annotation
+- Add `sidecar.istio.io/inject` to components annotation
+
+0.9.13
+- Remove `fsGroup` to avoid changing owner group of directory
diff --git a/charts/alluxio/Chart.yaml b/charts/alluxio/Chart.yaml
@@ -12,7 +12,7 @@
 name: alluxio
 apiVersion: v1
 description: Open source data orchestration for analytics and machine learning in any cloud.
-version: 0.9.12
+version: 0.9.13
 home: https://www.alluxio.io/
 maintainers:
 - name: Adit Madan

diff --git a/charts/alluxio/templates/fuse/daemonset.yaml b/charts/alluxio/templates/fuse/daemonset.yaml
@@ -84,8 +84,6 @@ spec:
       {{- end }}
       tolerations:
         - operator: Exists
-      securityContext:
-        fsGroup: {{ .Values.fuse.fsGroup }}
       initContainers:
         {{ if .Values.initUsers.enabled -}}
         - name: init-fuse

diff --git a/charts/alluxio/templates/master/statefulset.yaml b/charts/alluxio/templates/master/statefulset.yaml
@@ -85,8 +85,6 @@ spec:
       {{- else if .Values.nodeSelector }}
 {{ toYaml .Values.nodeSelector | trim | indent 8  }}
       {{- end }}
-      securityContext:
-        fsGroup: {{ .Values.fsGroup }}
       {{- if .Values.tolerations }}
       tolerations:
 {{ toYaml .Values.tolerations | indent 8 }}

diff --git a/charts/alluxio/templates/worker/statefulset.yaml b/charts/alluxio/templates/worker/statefulset.yaml
@@ -75,8 +75,6 @@ spec:
       hostNetwork: {{ $hostNetwork }}
       dnsPolicy: ClusterFirstWithHostNet
       {{- end }}
-      securityContext:
-        fsGroup: {{ .Values.fsGroup }}
       nodeSelector:
       {{- if .Values.worker.nodeSelector }}
 {{ toYaml .Values.worker.nodeSelector | trim | indent 8  }}

diff --git a/charts/alluxio/values.yaml b/charts/alluxio/values.yaml
@@ -37,7 +37,6 @@ initUsers:
 # Security Context
 user: 1000
 group: 1000
-fsGroup: 1000
 
 # Site properties for all the components
 properties:
@@ -390,7 +389,6 @@ fuse:
   dnsPolicy: ClusterFirstWithHostNet
   user: 0
   group: 0
-  fsGroup: 0
   args:
     - fuse
     - --fuse-opts=allow_other

diff --git a/charts/fluid-databackup/alluxio/templates/databackup.yaml b/charts/fluid-databackup/alluxio/templates/databackup.yaml
@@ -13,8 +13,6 @@ spec:
   imagePullSecrets:
     {{- toYaml . | nindent 4 }}
   {{- end }}
-  securityContext:
-    fsGroup: {{ .Values.fsGroup }}
   {{ if .Values.initUsers.enabled -}}
   initContainers:
     - name: init-users

diff --git a/charts/fluid-databackup/alluxio/values.yaml b/charts/fluid-databackup/alluxio/values.yaml
@@ -57,4 +57,3 @@ initUsers:
 # Security Context
 user: 1000
 group: 1000
-fsGroup: 1000
diff --git a/charts/fluid-databackup/goosefs/templates/databackup.yaml b/charts/fluid-databackup/goosefs/templates/databackup.yaml
@@ -13,8 +13,6 @@ spec:
   imagePullSecrets:
     {{- toYaml . | nindent 4 }}
   {{- end }}
-  securityContext:
-    fsGroup: {{ .Values.fsGroup }}
   {{ if .Values.initUsers.enabled -}}
   initContainers:
     - name: init-users

diff --git a/pkg/ddc/alluxio/backup_data.go b/pkg/ddc/alluxio/backup_data.go
@@ -18,6 +18,10 @@ package alluxio
 
 import (
 	"fmt"
+	"os"
+	"strconv"
+	"strings"
+
 	datav1alpha1 "github.com/fluid-cloudnative/fluid/api/v1alpha1"
 	"github.com/fluid-cloudnative/fluid/pkg/common"
 	cdatabackup "github.com/fluid-cloudnative/fluid/pkg/databackup"
@@ -26,10 +30,7 @@ import (
 	"github.com/fluid-cloudnative/fluid/pkg/utils"
 	"github.com/fluid-cloudnative/fluid/pkg/utils/docker"
 	"gopkg.in/yaml.v2"
-	"os"
 	"sigs.k8s.io/controller-runtime/pkg/client"
-	"strconv"
-	"strings"
 )
 
 // generateDataBackupValueFile builds a DataBackupValueFile by extracted specifications from the given DataBackup, and
@@ -146,7 +147,8 @@ func (e *AlluxioEngine) generateDataBackupValueFile(ctx cruntime.ReconcileReques
 	if runAs != nil {
 		dataBackupValue.UserInfo.User = int(*runAs.UID)
 		dataBackupValue.UserInfo.Group = int(*runAs.GID)
-		dataBackupValue.UserInfo.FSGroup = 0
+		// avoid setting FSGroup with root group
+		// dataBackupValue.UserInfo.FSGroup = 0
 		dataBackupValue.InitUsers = common.InitUsers{
 			Enabled:  true,
 			EnvUsers: utils.GetInitUserEnv(runAs),

diff --git a/pkg/ddc/alluxio/port_parser_test.go b/pkg/ddc/alluxio/port_parser_test.go
@@ -34,7 +34,6 @@ imageTag: release-2.5.0-2-SNAPSHOT-52ad95c
 imagePullPolicy: IfNotPresent
 user: 0
 group: 0
-fsGroup: 0
 properties:
   alluxio.fuse.cached.paths.max: "1000000"
   alluxio.fuse.debug.enabled: "false"

diff --git a/pkg/ddc/alluxio/transform.go b/pkg/ddc/alluxio/transform.go
@@ -142,9 +142,9 @@ func (e *AlluxioEngine) transformCommonPart(runtime *datav1alpha1.AlluxioRuntime
 	value.Image, value.ImageTag, value.ImagePullPolicy, value.ImagePullSecrets = e.parseRuntimeImage(image, imageTag, imagePullPolicy, imagePullSecrets)
 
 	value.UserInfo = common.UserInfo{
-		User:    0,
-		FSGroup: 0,
-		Group:   0,
+		User: 0,
+		// FSGroup: 0,
+		Group: 0,
 	}
 
 	// transform init users