Comments (3)
Bottlerocket's /etc
is not writable by most processes, so this host path volume will be created but won't be writable:
volumes:
- name: providervol
hostPath:
path: "/etc/kubernetes/secrets-store-csi-providers"
Ideally you'd use a path somewhere under /var
for any state that needs to be saved, and under /run
for anything ephemeral. /etc
is a strange place to create sockets even on systems where it's allowed.
from secrets-store-csi-driver-provider-aws.
Thank you for reporting this issue. It appears that /etc/kubernetes/secrets-store-csi-providers is the standard location for secret store csi providers, and we strive to be as consistent as we can. We are investigating if there are any other ways to enable support in Bottlerocket that does not involve changing this standard location. Please let us know if you have ideas.
from secrets-store-csi-driver-provider-aws.
Closing in favor of bottlerocket-os/bottlerocket#1524
from secrets-store-csi-driver-provider-aws.
Related Issues (20)
- When adding nodeSelector and tolerations to schedule onto a specific node, secrets can no longer be fetched. HOT 3
- Pod Identity Association not recognised by secrets store CSI driver HOT 21
- [Question] Inside .yaml, there is a way to retrieve all aws secrets without pass keys? HOT 1
- Unable to mount secret, "Failed fetching secret <secretName>: RequestCanceled: request context canceled" HOT 1
- Expose Additional Security Context Settings in Helm Chart HOT 1
- Is it possible to use this outside of EKS? HOT 3
- Allow setting `driver-writes-secrets` argument via Helm values HOT 1
- Please consider changing the object parameter format. HOT 2
- AWS provider pod failing with "panic: runtime error: invalid memory address or nil pointer dereference" HOT 2
- Provider socket does not exist if provider pod starts before driver pod HOT 2
- Wait(n=1) would exceed context deadline HOT 1
- Secret access cross account without resource based policy HOT 1
- Cross account secret access HOT 1
- Request support for adding custom CA certs to helm chart HOT 1
- Error with affinity HOT 7
- Support of Access Management Roles Anywhere HOT 2
- Consider adding a changelog or useful notes to Github releases
- Respect Audience Annotation
- secrets does not working on mysql-pods
- not creating k8s secrets
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from secrets-store-csi-driver-provider-aws.