Skip to main content
NetApp Knowledge Base

qcow2 image upload fails with permission denied using ontap-san in OpenShift

Views:
6
Visibility:
Public
Votes:
0
Category:
astra_trident
Specialty:
astra
Last Updated:

Applies to

  • NetApp Trident 26.x (ontap-san driver)
  • OpenShift Virtualization (KubeVirt / CDI)
  • ONTAP with Fibre Channel or iSCSI backend (ontap-san)

Issue

  • Uploading a qcow2 or ISO image to create a bootable volume in OpenShift Virtualization using a Trident ontap-san StorageClass, the upload fails with the following error:
Saving stream failed: Unable to transfer source data to scratch space: could not open file "/scratch/tmpimage": open /scratch/tmpimage: permission denied
  • Running a write test inside the CDI upload pod confirms the issue:
oc exec -n <namespace> <cdi-upload-pod> -- touch /scratch/test
touch: cannot touch '/scratch/test': Permission denied
  • The /scratch directory is mounted as root:root with permissions drwxr-xr-x, preventing the non-root CDI upload pod from writing to it.
  • The same upload succeeds when an NFS-backed StorageClass is used.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.