fsGroup is a request, not a guarantee

A non-root pod crashlooped on permission denied with a textbook securityContext, because the volume plugin behind a host-directory-backed claim carries no ownership pass and nothing says so. The field validated, the ownership change never happened, and only the directory reached through the application's own mount could settle it.

• kubernetes
• storage
• security
• prometheus
• talos
• debugging