Merge pull request #720 from andyzhangx/fix-tmp-mount-permission-4.8

fix: tmp path mount permission error on charts
This commit is contained in:
Andy Zhang 2024-07-23 22:46:29 +08:00 committed by GitHub
commit d9f6033fe9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
15 changed files with 0 additions and 18 deletions

View File

@ -91,7 +91,6 @@ spec:
capabilities: capabilities:
add: ["SYS_ADMIN"] add: ["SYS_ADMIN"]
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
args : args :
- "--v={{ .Values.node.logLevel }}" - "--v={{ .Values.node.logLevel }}"

View File

@ -91,7 +91,6 @@ spec:
capabilities: capabilities:
add: ["SYS_ADMIN"] add: ["SYS_ADMIN"]
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
args : args :
- "--v={{ .Values.node.logLevel }}" - "--v={{ .Values.node.logLevel }}"

View File

@ -91,7 +91,6 @@ spec:
capabilities: capabilities:
add: ["SYS_ADMIN"] add: ["SYS_ADMIN"]
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
args : args :
- "--v={{ .Values.node.logLevel }}" - "--v={{ .Values.node.logLevel }}"

View File

@ -108,7 +108,6 @@ spec:
drop: drop:
- ALL - ALL
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
{{- if hasPrefix "/" .Values.image.nfs.repository }} {{- if hasPrefix "/" .Values.image.nfs.repository }}
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
{{- else }} {{- else }}

View File

@ -108,7 +108,6 @@ spec:
drop: drop:
- ALL - ALL
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
{{- if hasPrefix "/" .Values.image.nfs.repository }} {{- if hasPrefix "/" .Values.image.nfs.repository }}
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
{{- else }} {{- else }}

View File

@ -164,8 +164,6 @@ spec:
mountPropagation: "Bidirectional" mountPropagation: "Bidirectional"
- mountPath: /csi - mountPath: /csi
name: socket-dir name: socket-dir
- mountPath: {{ .Values.controller.workingMountDir }}
name: tmp-dir
resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }} resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
volumes: volumes:
- name: pods-mount-dir - name: pods-mount-dir
@ -174,5 +172,3 @@ spec:
type: Directory type: Directory
- name: socket-dir - name: socket-dir
emptyDir: {} emptyDir: {}
- name: tmp-dir
emptyDir: {}

View File

@ -108,7 +108,6 @@ spec:
drop: drop:
- ALL - ALL
allowPrivilegeEscalation: true allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
{{- if hasPrefix "/" .Values.image.nfs.repository }} {{- if hasPrefix "/" .Values.image.nfs.repository }}
image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
{{- else }} {{- else }}

View File

@ -140,8 +140,6 @@ spec:
mountPropagation: "Bidirectional" mountPropagation: "Bidirectional"
- mountPath: /csi - mountPath: /csi
name: socket-dir name: socket-dir
- name: tmp-dir
mountPath: /tmp
resources: resources:
limits: limits:
memory: 200Mi memory: 200Mi
@ -153,7 +151,5 @@ spec:
hostPath: hostPath:
path: /var/lib/kubelet/pods path: /var/lib/kubelet/pods
type: Directory type: Directory
- name: tmp-dir
emptyDir: {}
- name: socket-dir - name: socket-dir
emptyDir: {} emptyDir: {}

View File

@ -118,8 +118,6 @@ spec:
volumeMounts: volumeMounts:
- name: socket-dir - name: socket-dir
mountPath: /csi mountPath: /csi
- name: tmp-dir
mountPath: /tmp
- name: pods-mount-dir - name: pods-mount-dir
mountPath: /var/lib/kubelet/pods mountPath: /var/lib/kubelet/pods
mountPropagation: "Bidirectional" mountPropagation: "Bidirectional"
@ -134,8 +132,6 @@ spec:
hostPath: hostPath:
path: /var/lib/kubelet/plugins/csi-nfsplugin path: /var/lib/kubelet/plugins/csi-nfsplugin
type: DirectoryOrCreate type: DirectoryOrCreate
- name: tmp-dir
emptyDir: {}
- name: pods-mount-dir - name: pods-mount-dir
hostPath: hostPath:
path: /var/lib/kubelet/pods path: /var/lib/kubelet/pods