Bottlerocket support about secrets-store-csi-driver-provider-aws HOT 3 CLOSED

Bottlerocket's /etc is not writable by most processes, so this host path volume will be created but won't be writable:

      volumes:
        - name: providervol
          hostPath:
            path: "/etc/kubernetes/secrets-store-csi-providers"

Ideally you'd use a path somewhere under /var for any state that needs to be saved, and under /run for anything ephemeral. /etc is a strange place to create sockets even on systems where it's allowed.

from secrets-store-csi-driver-provider-aws.

Thank you for reporting this issue. It appears that /etc/kubernetes/secrets-store-csi-providers is the standard location for secret store csi providers, and we strive to be as consistent as we can. We are investigating if there are any other ways to enable support in Bottlerocket that does not involve changing this standard location. Please let us know if you have ideas.

from secrets-store-csi-driver-provider-aws.

Closing in favor of bottlerocket-os/bottlerocket#1524

from secrets-store-csi-driver-provider-aws.