Canonical k8s `shared` folder wrong permissions

[misohu]

Bug Description

Details about the setup can be found in this comment #187 (comment)

After deploying DSS to Canonical k8s shared folder in the notebook is complaining about permissions when trying to create notebook.

To Reproduce

1. Run steps from this comment Test DSS with new k8s snap #187 (comment)
2. Create a notebook data-science-stack.dss create my-notebook-scipy --image=kubeflownotebookswg/jupyter-scipy:v1.8.0
3. Access the notebook
4. Click on shared folder from the left panel
5. Click on Create new notebook

Environment

Canonical k8s v1.32.0
DSS latest stable (without the microk8s storage class reference)

Relevant Log Output

Permission denied: shared/Untitled.ipynb

Additional Context

No response

[syncronize-issues-to-jira]

Thank you for reporting your feedback to us!

The internal ticket has been created: https://warthogs.atlassian.net/browse/KF-6776.

This message was autogenerated

[misohu]

After further inspection looks like every volume in canical k8s its now mounted only for root user with restricted privileges for different users. I had to add initcontainer for notebook deployments to change the permissions of the mount.

[StefanoFioravanzo]

@misohu I see that in the PR you are using and init container and running a chmod command. Wouldn't it be possibe to simplify by setting the right securityContext for the volume?

[misohu]

I have tried different combinations but it failed as I need to change permissions on mounted volume ... do you have sth specific in mind ? @StefanoFioravanzo

[StefanoFioravanzo]

Nothing in particular, it's just puzzling since my understanding is that security context has been designed for these issues as well.