What is Kubernetes Pod Security Context FsGroup?

Question

Accepted Answer

**FsGroup** — group ownership for volume mounts.

```yaml
apiVersion: v1
kind: Pod
metadata:
  name: fsgroup-pod
spec:
  securityContext:
    fsGroup: 2000
    fsGroupChangePolicy: OnRootMismatch
  containers:
  - name: app
    image: nginx:latest
    volumeMounts:
    - name: data
      mountPath: /data
  volumes:
  - name: data
    persistentVolumeClaim:
      claimName: my-pvc
```

```bash
kubectl exec fsgroup-pod -- ls -la /data
kubectl exec fsgroup-pod -- stat /data
```

**Options:** fsGroup, fsGroupChangePolicy (Always/OnRootMismatch).

DevOps: What is Kubernetes Pod Security Context FsGroup?