Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type #975

Merged
merged 1 commit into from
Dec 14, 2020
Merged

elasticsearch: add emptyDir to podSecurityPolicy as allowed volume-type #975

merged 1 commit into from
Dec 14, 2020

Conversation

unki
Copy link
Contributor

@unki unki commented Dec 13, 2020

When adding custom keystore via keystore: for values.yml, the initContainer wants to create an emptyDir-based volume as seen here.

If you have podSecurityPolicy.create: true set at the same time, the current policy does not permit the use of emptyDir.

In such a case deployment is then failing:

create Pod elasticsearch-master-2 in StatefulSet elasticsearch-master failed error: pods "elasticsearch-master-2" is forbidden: PodSecurityPolicy: unable to admit pod: [spec.volumes[4]: Invalid value: "emptyDir": emptyDir volumes are not allowed to be used

@elasticmachine
Copy link
Collaborator

Since this is a community submitted pull request, a Jenkins build has not been kicked off automatically. Can an Elastic organization member please verify the contents of this patch and then kick off a build manually?

@cla-checker-service
Copy link

cla-checker-service bot commented Dec 13, 2020

💚 CLA has been signed

@jmlrt
Copy link
Member

jmlrt commented Dec 14, 2020

cla/check

Copy link
Member

@jmlrt jmlrt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM⛴

@jmlrt
Copy link
Member

jmlrt commented Dec 14, 2020

jenkins test this please

@jmlrt jmlrt merged commit f4b0056 into elastic:master Dec 14, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt pushed a commit to jmlrt/helm-charts that referenced this pull request Dec 18, 2020
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#980)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…lume-type (#975) (#981)

Co-authored-by: unki <unki@users.noreply.github.com>
jmlrt added a commit that referenced this pull request Dec 18, 2020
…ume-type (#975) (#982)

Co-authored-by: unki <unki@users.noreply.github.com>
@jmlrt jmlrt added v6.8.14 and removed v6.8.15 labels Dec 21, 2020
@jmlrt jmlrt mentioned this pull request Feb 8, 2021
This was referenced Feb 12, 2021
@jmlrt jmlrt mentioned this pull request Feb 18, 2021
@jmlrt jmlrt mentioned this pull request Mar 15, 2021
@jmlrt jmlrt mentioned this pull request Mar 18, 2021
@jmlrt jmlrt mentioned this pull request May 25, 2021
@jmlrt jmlrt mentioned this pull request Mar 8, 2022
@jmlrt jmlrt mentioned this pull request Apr 21, 2022
This was referenced Sep 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants