Skip to content

Commit bc198e9

Browse files
nberleefrezbo
authored andcommitted
docs: retain cilium autoMount pending upstream hostPath fix
Partial rollback of 76fa45a. The cilium helm chart requires an fix to handle the hostPath at /sys/fs/bpf when bpf.autoMount.enabled=false. The earlier commit disabled bpf automount, removing the init container's mount. Helm missed adding the hostPath, and neither /sys nor /sys/fs got added. This made cilium wrongly mount /sys/fs/bpf. Fixes error message at: #7565 (comment) Signed-off-by: Nico Berlee <nico.berlee@on2it.net> Signed-off-by: Noel Georgi <git@frezbo.dev>
1 parent 86c94ef commit bc198e9

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

website/content/v1.5/kubernetes-guides/network/deploying-cilium.md

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,6 @@ cilium install \
9090
--helm-set=kubeProxyReplacement=strict \
9191
--helm-set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
9292
--helm-set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
93-
--helm-set=bpf.autoMount.enabled=false \
9493
--helm-set=cgroup.autoMount.enabled=false \
9594
--helm-set=cgroup.hostRoot=/sys/fs/cgroup \
9695
--helm-set=k8sServiceHost=localhost \
@@ -126,7 +125,6 @@ helm install \
126125
--set=kubeProxyReplacement=disabled \
127126
--set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
128127
--set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
129-
--set=bpf.autoMount.enabled=false \
130128
--set=cgroup.autoMount.enabled=false \
131129
--set=cgroup.hostRoot=/sys/fs/cgroup
132130
```
@@ -143,7 +141,6 @@ helm install \
143141
--set=kubeProxyReplacement=strict \
144142
--set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
145143
--set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
146-
--set=bpf.autoMount.enabled=false \
147144
--set=cgroup.autoMount.enabled=false \
148145
--set=cgroup.hostRoot=/sys/fs/cgroup \
149146
--set=k8sServiceHost=localhost \
@@ -166,7 +163,6 @@ helm template \
166163
--set=kubeProxyReplacement=disabled \
167164
--set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
168165
--set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
169-
--set=bpf.autoMount.enabled=false \
170166
--set=cgroup.autoMount.enabled=false \
171167
--set=cgroup.hostRoot=/sys/fs/cgroup > cilium.yaml
172168

@@ -188,7 +184,6 @@ helm template \
188184
--set=kubeProxyReplacement=strict \
189185
--set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
190186
--set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
191-
--set=bpf.autoMount.enabled=false \
192187
--set=cgroup.autoMount.enabled=false \
193188
--set=cgroup.hostRoot=/sys/fs/cgroup \
194189
--set=k8sServiceHost=localhost \

0 commit comments

Comments
 (0)