Technology: manifest
| ID | Title | Description | Category | Technology | Tags |
|---|---|---|---|---|---|
| CRE-2025-0069 Medium Impact: 6/10 Mitigation: 4/10 | Kubernetes fsGroup ignored on NFS volumes | Pods that mount NFS volumes and set `securityContext.fsGroup` still have the directory owned by `root:root`. The kubelet does not chown the share, so non-root containers fail with "Permission denied". | Kubernetes Storage Problems | manifest | KubernetesNFSsecurityContext |