title: Permission denied when chown on elasticsearch data directory in kubernetes statefulset
body: <p>Hoping someone can help me resolve what appears to be a permissions error. I'm trying to start a 3-node elasticsearch cluster using the official elasticsearch docker image. When the container was started I was getting an "access denied" error from elasticsearch on /usr/share/elasticsearch/data/nodes so I tried adding a command to make elasticsearch the owner of /usr/share/elasticsearch/data...but I get these errors when I include the chown command:</p>
  
  <pre><code>chown: cannot read directory '/usr/share/elasticsearch/data/lost+found': Permission denied
  chown: changing ownership of '/usr/share/elasticsearch/data': Operation not permitted
  </code></pre>
  
  <p>Here is my statefulset yaml file:</p>
  
  <pre><code>apiVersion: apps/v1beta1
  kind: StatefulSet
  metadata:
    name: esnode
  spec:
    serviceName: elasticsearch-transport
    replicas: 3
    template:
      metadata:
        labels:
          app: evo-pro-cluster
      spec:
        initContainers:
        - name: init-sysctl
          image: busybox
          imagePullPolicy: IfNotPresent
          command: ["sysctl", "-w", "vm.max_map_count=262144"]
          securityContext:
            privileged: true
        containers:
        - name: elasticsearch
          securityContext:
            privileged: true
            capabilities:
              add:
              - IPC_LOCK
              - SYS_RESOURCE
          command: ["/bin/sh"]
          args: ["-c", "chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/data"]
          image: docker.elastic.co/elasticsearch/elasticsearch:5.6.1
          imagePullPolicy: Always
          env:
          - name: "ES_JAVA_OPTS"
            value: "-Xms6g -Xmx6g"
          ports:
          - containerPort: 9200
            name: http
            protocol: TCP
          - containerPort: 9300
            name: transport
            protocol: TCP
          volumeMounts:
          - name: storage
            mountPath: /usr/share/elasticsearch/data
          - name: config
            mountPath: /usr/share/elasticsearch/config/elasticsearch.yml
            subPath: elasticsearch.yml
        volumes:
          - name: config
            configMap:
              name: elasticsearch-config
    volumeClaimTemplates:
    - metadata:
        name: storage
        annotations:
          storageClassName: standard
      spec:
        accessModes: [ "ReadWriteOnce" ]
        resources:
          requests:
            storage: 110Gi
  </code></pre>