Skip to content
This repository was archived by the owner on May 16, 2023. It is now read-only.

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type#975

Merged
jmlrt merged 1 commit intoelastic:masterfrom
unki:add-emptydir-to-pod-security-policy-volumes
Dec 14, 2020
Merged

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type#975
jmlrt merged 1 commit intoelastic:masterfrom
unki:add-emptydir-to-pod-security-policy-volumes

Conversation

@unki
Copy link
Copy Markdown
Contributor

@unki unki commented Dec 13, 2020

When adding custom keystore via keystore: for values.yml, the initContainer wants to create an emptyDir-based volume as seen here.

If you have podSecurityPolicy.create: true set at the same time, the current policy does not permit the use of emptyDir.

In such a case deployment is then failing:

create Pod elasticsearch-master-2 in StatefulSet elasticsearch-master failed error: pods "elasticsearch-master-2" is forbidden: PodSecurityPolicy: unable to admit pod: [spec.volumes[4]: Invalid value: "emptyDir": emptyDir volumes are not allowed to be used

@elasticmachine
Copy link
Copy Markdown
Collaborator

Since this is a community submitted pull request, a Jenkins build has not been kicked off automatically. Can an Elastic organization member please verify the contents of this patch and then kick off a build manually?

@cla-checker-service
Copy link
Copy Markdown

cla-checker-service Bot commented Dec 13, 2020

💚 CLA has been signed

@jmlrt
Copy link
Copy Markdown
Member

jmlrt commented Dec 14, 2020

cla/check

Copy link
Copy Markdown
Member

@jmlrt jmlrt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM⛴

@jmlrt
Copy link
Copy Markdown
Member

jmlrt commented Dec 14, 2020

jenkins test this please

@jmlrt jmlrt merged commit f4b0056 into elastic:master Dec 14, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#980)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…lume-type (#975) (#981)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#982)

Co-authored-by: unki <unki@users.noreply.github.com>
@jmlrt jmlrt added v6.8.14 and removed v6.8.15 labels Dec 21, 2020
@jmlrt jmlrt mentioned this pull request Feb 8, 2021
This was referenced Feb 12, 2021
@jmlrt jmlrt mentioned this pull request Feb 18, 2021
@jmlrt jmlrt mentioned this pull request Mar 15, 2021
@jmlrt jmlrt mentioned this pull request Mar 18, 2021
@jmlrt jmlrt mentioned this pull request May 25, 2021
@jmlrt jmlrt mentioned this pull request Mar 8, 2022
@jmlrt jmlrt mentioned this pull request Apr 21, 2022
This was referenced Sep 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants