question

MichaelGrant-4538 avatar image
0 Votes"
MichaelGrant-4538 asked SumanthMarigowda-MSFT commented

Request: support anonuid and anongid in Azure Files NFS

One NFS pattern that I find very helpful is to use the "all_squash" pattern with a specific, nonzero UID/GID pair specified using "anonuid" and "anongid". For instance, I can use this in Kubernetes to provide a persistent storage mechanism that serves different subdirectories to each container, thus providing a physical form of access control. Because each container will launch as the same UID and GID, using "all_squash" eliminates any chance of accidental permissions corruption.

Currently, the NFS support for Azure Files supports the "all_squash" capability, but not the ability to specify anongid and anonuid. I would like to request that this be added!

azure-files
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@MichaelGrant-4538 Thanks for raising this good question. I’m checking on this internally with the product team and will get back to you with something concrete. Apologies for the delay in responding here,

0 Votes 0 ·

1 Answer

MichaelGrant-4538 avatar image
0 Votes"
MichaelGrant-4538 answered SumanthMarigowda-MSFT commented

One more important note. One could argue: "Why not just use the UID and GID that NFS assigns by default?" But it turns out that the value it assigns falls outside of the range acceptable to Kubernetes, which means that I cannot add that GID to the container's supplementalGroups.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@MichaelGrant-4538 I wish to engage with you offline for a closer look and provide a quick and specialized assistance, please send an email with subject line “Attn:subm” to AzCommunity[at]Microsoft[dot]com referencing this thread and the Azure subscription ID, I will follow-up with you. Once again, apologies for any inconvenience with this issue.

Thanks for your patience and co-operation.

0 Votes 0 ·