qcow2 image upload fails with permission denied using ontap-san in OpenShift
Applies to
- NetApp Trident 26.x (ontap-san driver)
- OpenShift Virtualization (KubeVirt / CDI)
- ONTAP with Fibre Channel or iSCSI backend (ontap-san)
Issue
- Uploading a qcow2 or ISO image to create a bootable volume in OpenShift Virtualization using a Trident ontap-san StorageClass, the upload fails with the following error:
Saving stream failed: Unable to transfer source data to scratch space: could not open file "/scratch/tmpimage": open /scratch/tmpimage: permission denied- Running a write test inside the CDI upload pod confirms the issue:
oc exec -n <namespace> <cdi-upload-pod> -- touch /scratch/testtouch: cannot touch '/scratch/test': Permission denied- The
/scratchdirectory is mounted asroot:rootwith permissionsdrwxr-xr-x, preventing the non-root CDI upload pod from writing to it. - The same upload succeeds when an NFS-backed StorageClass is used.
