If you look at the values.yaml of the IKO's Helm chart you'll find:
useIrisFsGroup: false
Let's break down what it is and in what situations you may want to set it to true.
FsGroup refers to the file system group.
Containerization is a lightweight alternative to full machine virtualization that involves encapsulating an application in a container with its own operating environment.