This is a low-level container runtime implementation that enforces "PodSecurityContext.{SupplementalGroups ∪ FsGroup}" in containers in Pods - View it on GitHub