From 5b210b02d0e5125ba07477abd0586ce3375d2c06 Mon Sep 17 00:00:00 2001
From: Cesar Celis Hernandez <celis.hernandez.cesar@gmail.com>
Date: Tue, 29 Aug 2023 18:12:00 -0400
Subject: [PATCH] Skip recursive permission change

---
 helm/tenant/values.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/helm/tenant/values.yaml b/helm/tenant/values.yaml
index f8e10020ff3..f23f64e1f74 100644
--- a/helm/tenant/values.yaml
+++ b/helm/tenant/values.yaml
@@ -66,11 +66,15 @@ tenant:
       affinity: { }
       ## Configure resource requests and limits for MinIO containers
       resources: { }
-      ## Configure security context
+      ## Configure Pod's security context
+      ## We recommend to skip the recursive permission change by using
+      ## fsGroupChangePolicy as OnRootMismatch because it can be pretty
+      ## expensive for larger volumes with lots of small files.
       securityContext:
         runAsUser: 1000
         runAsGroup: 1000
         fsGroup: 1000
+        fsGroupChangePolicy: "OnRootMismatch"
         runAsNonRoot: true
       ## Configure container security context
       containerSecurityContext: