New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
mgr: run the watch side car config on /etc/ceph #9386
Conversation
Just checking: |
Good point, I need to check and merge, if not done already. |
For now, we must run the container with UID 0 and privileged for multiple reasons: * the rook binary writes ceph config to /var/lib/rook which is owned by root * it's difficult to use /etc/ceph since it will conflict with the rook-ceph-override configmap AND is also owned by root since it's a mounted configmap. * using /etc/ceph might be possible but has other issues with rook's exec package since the ceph config is built from /var/lib/rook Closes: rook#9385 Signed-off-by: Sébastien Han <seb@redhat.com>
The context was not initialized and thus the configmap fetch will fail with a nil pointer. Signed-off-by: Sébastien Han <seb@redhat.com>
d370654
to
892c9a2
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, if you could just confirm that it's been tested on OpenShift where the privs would be more critical.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Testing on openshift looks good for both 1 or 2 mgrs, and the watch-active sidecar is running successfully. The OSDs also were created without any issues.
mgr: run the watch side car config on /etc/ceph (backport #9386)
Description of your changes:
We don't need to use /var/lib/rook for the ceph config and keyring, so
let's use /etc/ceph which has the right permissions too. Also, we need
to run with the ceph user since the rook image defaults to the "rook"
user.
Signed-off-by: Sébastien Han seb@redhat.com
Which issue is resolved by this Pull Request:
Resolves #9385
Checklist:
make codegen
) has been run to update object specifications, if necessary.