# Fs snapshot permission issues inside a kubernetes cluster

**URL:** <https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147>\
**Category:** Elasticsearch\
**Created:** [June 15, 2020, 1:52pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147 "2020-06-15T13:52:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rajashree\_Sekar](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\
**Post date:** [June 15, 2020, 1:52pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147/1 "2020-06-15T13:52:00Z")

</div>

Hi Team,

I'm trying to take snapshot of elasticsearch which is deployed inside a kubernetes cluster.

I'm trying to take backup on file system whereas Im getting below error.  
I understand that the default user will be elasticsearch, so while mounting the volume  
Error:  
` { "type": "repository_verification_exception", "reason": "[my_backup] [[Vy3xhG9OQ5SaHo5oIEYK0w, 'RemoteTransportException[[elasticsearch-master-1][10.233.93.69:9300][internal:admin/repository/verify]]; nested: RepositoryVerificationException[[my_backup] a file written by master to the store [/usr/share/elasticsearch/backups] cannot be accessed on the node [{elasticsearch-master-1}{Vy3xhG9OQ5SaHo5oIEYK0w}{sflWWtUaTw-qeecII-tdTg}{10.233.93.69}{10.233.93.69:9300}]. This might indicate that the store [/usr/share/elasticsearch/backups] is not shared between this node and the master node or that permissions on the store don't allow reading files written by the master node];'], [K89SLsu7RMS8fIey2P0ihw, 'RemoteTransportException[[elasticsearch-master-0][10.233.102.120:9300][internal:admin/repository/verify]]; nested: RepositoryVerificationException[[my_backup] a file written by master to the store [/usr/share/elasticsearch/backups] cannot be accessed on the node [{elasticsearch-master-0}{K89SLsu7RMS8fIey2P0ihw}{WP14RXVoQemhwaFFUYKRcg}{10.233.102.120}{10.233.102.120:9300}]. This might indicate that the store [/usr/share/elasticsearch/backups] is not shared between this node and the master node or that permissions on the store don't allow reading files written by the master node];']]" }`

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/8/6828ce5440b8cf665407cbf06fb1e035e49dc952.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/1/512cde95075f1e6bf44d79702221407bd57cefb6.png)

Also including the volumeMount security context:  
`"securityContext": { "privileged": true, "runAsUser": 1000 }`  
Any leads would be more helpful.

Thanks in Advance!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2020, 10:39pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147/2 "2020-06-15T22:39:12Z")

</div>

Please don't post pictures of text, they are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂

A volume/path mounted for snapshots must be available - read+write - on all nodes in the cluster. It cannot just be a local path on a single node.

---

<div class="post-metadata">

**Author:** ![Rajashree\_Sekar](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\
**Post date:** [June 16, 2020, 1:06pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147/3 "2020-06-16T13:06:37Z")

</div>

Hi Mark,

Sorry for the inconvenience. I have deployed Elastic search as Statefulset, I wonder how the volume is not shared.

Thanks  
Rajashree

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 14, 2020, 1:06pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147/4 "2020-07-14T13:06:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.