Merge pull request #720 from andyzhangx/fix-tmp-mount-permission-4.8
fix: tmp path mount permission error on charts
This commit is contained in:
commit
d9f6033fe9
Binary file not shown.
@ -91,7 +91,6 @@ spec:
|
|||||||
capabilities:
|
capabilities:
|
||||||
add: ["SYS_ADMIN"]
|
add: ["SYS_ADMIN"]
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
args :
|
args :
|
||||||
- "--v={{ .Values.node.logLevel }}"
|
- "--v={{ .Values.node.logLevel }}"
|
||||||
|
|||||||
Binary file not shown.
@ -91,7 +91,6 @@ spec:
|
|||||||
capabilities:
|
capabilities:
|
||||||
add: ["SYS_ADMIN"]
|
add: ["SYS_ADMIN"]
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
args :
|
args :
|
||||||
- "--v={{ .Values.node.logLevel }}"
|
- "--v={{ .Values.node.logLevel }}"
|
||||||
|
|||||||
Binary file not shown.
@ -91,7 +91,6 @@ spec:
|
|||||||
capabilities:
|
capabilities:
|
||||||
add: ["SYS_ADMIN"]
|
add: ["SYS_ADMIN"]
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
args :
|
args :
|
||||||
- "--v={{ .Values.node.logLevel }}"
|
- "--v={{ .Values.node.logLevel }}"
|
||||||
|
|||||||
Binary file not shown.
@ -108,7 +108,6 @@ spec:
|
|||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
||||||
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
{{- else }}
|
{{- else }}
|
||||||
|
|||||||
Binary file not shown.
@ -108,7 +108,6 @@ spec:
|
|||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
||||||
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
{{- else }}
|
{{- else }}
|
||||||
|
|||||||
Binary file not shown.
@ -164,8 +164,6 @@ spec:
|
|||||||
mountPropagation: "Bidirectional"
|
mountPropagation: "Bidirectional"
|
||||||
- mountPath: /csi
|
- mountPath: /csi
|
||||||
name: socket-dir
|
name: socket-dir
|
||||||
- mountPath: {{ .Values.controller.workingMountDir }}
|
|
||||||
name: tmp-dir
|
|
||||||
resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
|
resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
|
||||||
volumes:
|
volumes:
|
||||||
- name: pods-mount-dir
|
- name: pods-mount-dir
|
||||||
@ -174,5 +172,3 @@ spec:
|
|||||||
type: Directory
|
type: Directory
|
||||||
- name: socket-dir
|
- name: socket-dir
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
- name: tmp-dir
|
|
||||||
emptyDir: {}
|
|
||||||
|
|||||||
@ -108,7 +108,6 @@ spec:
|
|||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
readOnlyRootFilesystem: true
|
|
||||||
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
{{- if hasPrefix "/" .Values.image.nfs.repository }}
|
||||||
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
|
||||||
{{- else }}
|
{{- else }}
|
||||||
|
|||||||
@ -140,8 +140,6 @@ spec:
|
|||||||
mountPropagation: "Bidirectional"
|
mountPropagation: "Bidirectional"
|
||||||
- mountPath: /csi
|
- mountPath: /csi
|
||||||
name: socket-dir
|
name: socket-dir
|
||||||
- name: tmp-dir
|
|
||||||
mountPath: /tmp
|
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: 200Mi
|
memory: 200Mi
|
||||||
@ -153,7 +151,5 @@ spec:
|
|||||||
hostPath:
|
hostPath:
|
||||||
path: /var/lib/kubelet/pods
|
path: /var/lib/kubelet/pods
|
||||||
type: Directory
|
type: Directory
|
||||||
- name: tmp-dir
|
|
||||||
emptyDir: {}
|
|
||||||
- name: socket-dir
|
- name: socket-dir
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
|
|||||||
@ -118,8 +118,6 @@ spec:
|
|||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: socket-dir
|
- name: socket-dir
|
||||||
mountPath: /csi
|
mountPath: /csi
|
||||||
- name: tmp-dir
|
|
||||||
mountPath: /tmp
|
|
||||||
- name: pods-mount-dir
|
- name: pods-mount-dir
|
||||||
mountPath: /var/lib/kubelet/pods
|
mountPath: /var/lib/kubelet/pods
|
||||||
mountPropagation: "Bidirectional"
|
mountPropagation: "Bidirectional"
|
||||||
@ -134,8 +132,6 @@ spec:
|
|||||||
hostPath:
|
hostPath:
|
||||||
path: /var/lib/kubelet/plugins/csi-nfsplugin
|
path: /var/lib/kubelet/plugins/csi-nfsplugin
|
||||||
type: DirectoryOrCreate
|
type: DirectoryOrCreate
|
||||||
- name: tmp-dir
|
|
||||||
emptyDir: {}
|
|
||||||
- name: pods-mount-dir
|
- name: pods-mount-dir
|
||||||
hostPath:
|
hostPath:
|
||||||
path: /var/lib/kubelet/pods
|
path: /var/lib/kubelet/pods
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user