Harbor containers using 10000 and tandp user and group permissions

[swasthibp]

Hi team,

We are trying harbor installation which fails with all other users(we tried root) but works only with userid 10000 with below error:
08:27:29 [emerg] 1#0: cannot load certificate "/etc/cert/server.crt": BIO_new_file() failed (SSL: error:8000000D:system library::Permission denied:calling fopen(/etc/cert/server.crt, r) error:10080002:BIO routines::system lib)
nginx: [emerg] cannot load certificate "/etc/cert/server.crt": BIO_new_file() failed (SSL: error:8000000D:system library::Permission denied:calling fopen(/etc/cert/server.crt, r) error:10080002:BIO routines::system lib)

Can we please know what are these user and group dependency for harbor pods?

[stonezdj]

the /etc/cert/ is mounted from /data dir., all directories and files under /data directory should have read/write permission for 10000 user and group.

[swasthibp]

Also what about the group to be used? Is that also specific?

[MinerYang]

Correct, user and group is specified in the image

[swasthibp]

could you please help me know where the user and group are specified in the image
and also what is the default user and group?

[swasthibp]

I see that the default user and group are 10000, are these permissions configurable? If yes, are there any impacts?

[swasthibp]

Hi,

Any updates here please?