Guy Margalit

According to our discussion I think that per bucket since this is a security property that admins would set for the dataset.

Hi @vamseekrishna25 Openshift version? Noobaa version? How did you install - with CLI `noobaa install`? Perhaps you have default annotations in the namespace for which uid ranges can be used?...

notice that `noobaa install` will deploy the SCC - https://github.com/noobaa/noobaa-operator/blob/2ddca699c8f510a4a63b66742df32cfedd4bddc1/pkg/operator/operator.go#L102 https://github.com/noobaa/noobaa-operator/blob/master/deploy/scc.yaml Perhaps you can check if you have this SCC deployed?

@akmithal How much memory would you expect the endpoint pod to consume? You can define endpoint resource limit in the NooBaa CR (spec.endpoints.resources... - [doc](https://github.com/noobaa/noobaa-operator/blob/master/doc/noobaa-crd.md#custom-cpu-and-memory-resources)) Or you mean that you...

Thanks @maratsal root squash could very much be the root cause, our db init containers are a mess of trying to [fix pvc permissions using root group (gid 0)](https://github.com/jackyalbo/noobaa-core/blob/c2097d5a0c02e77a58227687249951d4ad0d57bb/src/deploy/NVA_build/noobaa_init.sh#L167-L178) and...

> So maybe if PVC is from NFS storage we should not be running that permissions change I am not sure if not running it will work, because we need...

I now see the same problem on podman machine + kind clsuter. ``` $ kubectl logs noobaa-db-pg-0 -c init uid change has been identified - will change from uid: 0...

@dannyzaken will you assign this?

@jackyalbo We discussed that we want to fail PUT-object if the request is for encryption, but the underlying filesystem provides non-encrypted storage.

@jackyalbo rebase and resolve conflicts?