Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type #975

Merged
merged 1 commit into from
Dec 14, 2020
Merged

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type #975

merged 1 commit into from
Dec 14, 2020

Conversation

unki
Copy link
Contributor

@unki unki commented Dec 13, 2020

When adding custom keystore via keystore: for values.yml, the initContainer wants to create an emptyDir-based volume as seen here.

If you have podSecurityPolicy.create: true set at the same time, the current policy does not permit the use of emptyDir.

In such a case deployment is then failing:

create Pod elasticsearch-master-2 in StatefulSet elasticsearch-master failed error: pods "elasticsearch-master-2" is forbidden: PodSecurityPolicy: unable to admit pod: [spec.volumes[4]: Invalid value: "emptyDir": emptyDir volumes are not allowed to be used

@elasticmachine
Copy link
Collaborator

Since this is a community submitted pull request, a Jenkins build has not been kicked off automatically. Can an Elastic organization member please verify the contents of this patch and then kick off a build manually?

@cla-checker-service
Copy link

cla-checker-service bot commented Dec 13, 2020

💚 CLA has been signed

@jmlrt
Copy link
Member

jmlrt commented Dec 14, 2020

cla/check

Copy link
Member

@jmlrt jmlrt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM⛴

@jmlrt
Copy link
Member

jmlrt commented Dec 14, 2020

jenkins test this please

@jmlrt jmlrt merged commit f4b0056 into elastic:master Dec 14, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#980)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…lume-type (#975) (#981)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#982)

Co-authored-by: unki <unki@users.noreply.github.com>
@jmlrt jmlrt added v6.8.14 and removed v6.8.15 labels Dec 21, 2020
@jmlrt jmlrt mentioned this pull request Feb 8, 2021
This was referenced Feb 12, 2021
@jmlrt jmlrt mentioned this pull request Feb 18, 2021
@jmlrt jmlrt mentioned this pull request Mar 15, 2021
@jmlrt jmlrt mentioned this pull request Mar 18, 2021
@jmlrt jmlrt mentioned this pull request May 25, 2021
@jmlrt jmlrt mentioned this pull request Mar 8, 2022
@jmlrt jmlrt mentioned this pull request Apr 21, 2022
This was referenced Sep 14, 2022
# for free to subscribe to this conversation on GitHub. Already have an account? #.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants