Configure SecurityContext for CSI data movement helper Pods

[Elias-elastisys]

Hi.

I've been trying out the CSI data movement feature in Velero and am having issues with the helper Pods that velero creates when I try to backup PV/PVCs without any Pods using the resource. I work in a quite restricted environment that requires numeric users to verify that they are not root, and I was wondering if there is any way of configuring the helper Pods that velero creates to not use the default cnb user?

For restores we have previously used this configmap as described in your docs. But I can't find any documentation/issues/questions/code for a similar thing for the Pods that are created from the DataUpload resource when using this new csi data movement. Is it even possible?

[Lyndon-Li]

Do you want to run the backupPod and the data mover under a non-root user?

[Elias-elastisys]

Yes I need to run them as a numeric non-root user (e.g. 1000 or 10000)

[Lyndon-Li]

This is not currently supported. Please wait for resolve of this issue #7198

[Elias-elastisys]

Alright thanks! I solved it in the meantime with Gatekepeer Mutations.