chore(core): Add static mount points #1343
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
YuryLysov
requested review from
Isteb4k,
fl64,
nevermarine and
universal-itengineer
as code owners
diafour
reviewed
Aug 14, 2025
universal-itengineer
changed the title
diafour
reviewed
Aug 22, 2025
universal-itengineer
previously approved these changes
Aug 29, 2025
diafour
reviewed
Aug 29, 2025
diafour
force-pushed
the
mount-points
branch
2 times, most recently
from
1aa4ba6 to
a247a0d
Compare
diafour
force-pushed
the
mount-points
branch
from
a247a0d to
5ad5fa2
Compare
4 tasks
diafour
force-pushed
the
mount-points
branch
from
5ad5fa2 to
20ac74b
Compare
Images with pre-created mount points: - cdi-apiserver - cdi-cloner - cdi-controller - cdi-importer - cdi-operator - dvcr - dvcr-importer - dvcr-uploader - kube-api-rewriter - virt-api - virt-controller - virt-handler - virt-launcher - virt-operator - virtualization-api - virtualization-audit - virtualization-controller - hp pods Some notes: - Create /var/run subdirectories in /run, as /var/run is a symlink to ../run. - Add /var, /run and symlink /var/run -> ../run in 'distroless' base image. - Pre-create /var, /run and symlink /var/run -> ../run in kube-api-rewriter image. - Remove unused extraheaders settings in dvcr-importer and dvcr-uploader. Signed-off-by: YuryLysov <[email protected]> Co-authored-by: Ivan Mikheykin <[email protected]> Co-authored-by: Nikita Korolev <[email protected]> Signed-off-by: Nikita Korolev <[email protected]> Signed-off-by: Ivan Mikheykin <[email protected]>
diafour
force-pushed
the
mount-points
branch
from
20ac74b to
34131b0
Compare
|
Merged as a part of #1432. |
4 tasks
4 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Part of deckhouse/deckhouse#14920
/run,/var, and/var/run -> ../runin the base 'distroless' image to mimic strict containerd mode if run in regular mode.TODO
Why do we need it, and what problem does it solve?
All mountPaths should pre-created during build time to run in the environment with containerd integrity checks.
What is the expected result?
Module works as usual in the environment with containerd integrity checks.
Checklist
Note: e2e passed as a part of PR #1432
#1432 (comment)
Changelog entries