Skip to content

Commit ca24b32

Browse files
committed
Fix migrate-longer-csi-registration-path container runAsUser (#260)
# Description Noticed this during `stackablectl operator install secret`. Strangely this doesn't happen when installing via Tilt...
1 parent d21476a commit ca24b32

File tree

3 files changed

+5
-2
lines changed

3 files changed

+5
-2
lines changed

CHANGELOG.md

+2-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ All notable changes to this project will be documented in this file.
1212
### Changed
1313

1414
- Shortened the registration socket path for Microk8s compatibility ([#231]).
15-
- The old CSI registration path will be automatically migrated during upgrade ([#258]).
15+
- The old CSI registration path will be automatically migrated during upgrade ([#258], [#260]).
1616
- You might need to manually remove `/var/lib/kubelet/plugins_registry/secrets.stackable.tech-reg.sock` when downgrading
1717
- Made kubeletDir configurable ([#232]).
1818
- Microk8s users will need to `--set kubeletDir=/var/snap/microk8s/common/var/lib/kubelet`.
@@ -23,6 +23,7 @@ All notable changes to this project will be documented in this file.
2323
[#252]: https://github.com/stackabletech/secret-operator/pull/252
2424
[#257]: https://github.com/stackabletech/secret-operator/pull/257
2525
[#258]: https://github.com/stackabletech/secret-operator/pull/258
26+
[#260]: https://github.com/stackabletech/secret-operator/pull/260
2627

2728
## [23.1.0] - 2023-01-23
2829

Tiltfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ helm_crds, helm_non_crds = filter_yaml(
3030
set=[
3131
'image.repository=' + registry + '/' + operator_name,
3232
# Uncomment to enable unprivileged mode
33-
'securityContext.privileged=false',
33+
# 'securityContext.privileged=false',
3434
],
3535
),
3636
api_version = "^apiextensions\\.k8s\\.io/.*$",

deploy/helm/secret-operator/templates/daemonset.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,8 @@ spec:
9797
volumeMounts:
9898
- name: registration-sock
9999
mountPath: /registration
100+
securityContext:
101+
runAsUser: 0
100102
volumes:
101103
- name: registration-sock
102104
hostPath:

0 commit comments

Comments
 (0)