Check for fsGroup setting in pod's securityContext.
If set, it adds minimal group permissions and ownership to all mounted files/volumes to the pod.