What is Kubernetes Pod Security Context SupplementalGroups?

Question

Accepted Answer

**Supplemental Groups** — additional Linux groups for Pod.

```yaml
apiVersion: v1
kind: Pod
metadata:
  name: supplemental-pod
spec:
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    fsGroup: 2000
    supplementalGroups: [4000, 5000]
  containers:
  - name: app
    image: nginx:latest
    volumeMounts:
    - name: data
      mountPath: /data
  volumes:
  - name: data
    persistentVolumeClaim:
      claimName: my-pvc
```

```bash
kubectl exec supplemental-pod -- id
kubectl exec supplemental-pod -- groups
kubectl exec supplemental-pod -- ls -la /data
```

**Groups:** fsGroup (volume), supplementalGroups (additional).

DevOps: What is Kubernetes Pod Security Context SupplementalGroups?