TOS is mounted with Linux root privileges by default. You can modify the mount configuration to allow other users to read from and write to TOS PersistentVolumes. To do so, add the additional_args field to the static TOS PersistentVolume.

Issue description

The Deployment failed to mount TOS, with an error message indicating a mount failure and a mount device failure.

Cause analysis

TOS is mounted using Linux root privileges by default. The s3fs client cannot directly use the chown command to assign user permissions to the TOS mount point. Therefore, other users do not have read-write permissions for TOS PersistentVolumes.

Solution

You can modify the mount configuration to grant other users read and write access to the TOS PersistentVolume by adding the additional_args field to the static TOS PersistentVolume. The format for adding the configuration is additional_args: "-o allow_other -oumask=000". The following YAML manifest provides an example PersistentVolume configuration:

Warning

When adding the additional_args field to a static TOS PersistentVolume configuration, note the following:

The PersistentVolume must remain unbound to have this field added. The field configuration grants other users read and write access to the TOS PersistentVolume.

If the PersistentVolume has already been bound, you must unbind it and delete any remaining spec.claimRef settings before adding this field. Otherwise, the field configuration will not take effect.

apiVersion: v1​
kind: PersistentVolume​
metadata:​
  name: "pv-tos"​
spec:​
  accessModes:​
    - ReadWriteMany​
  capacity:​
    storage: 1Gi​
  csi:​
    driver: tos.csi.volcengine.com​
    volumeHandle: pv-tos​
    volumeAttributes:​
      url: "http://tos-s3-cn-beijing.volces.com"​
      bucket: "csi-test"​
      path: /test​
      additional_args: "-o allow_other -oumask=000" # The additional_args field used to grant other users read and write access to TOS PersistentVolumes.​
    nodePublishSecretRef:​
      name: tos-secret​
      namespace: kube-system​

Last updated: 2026.07.23 14:31:46

Public security network record in Beijing: No. 11010802032137