-
Notifications
You must be signed in to change notification settings - Fork 4.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Secret Volume Mode #2909
Secret Volume Mode #2909
Conversation
The pod will error when using the `--auto-generate-certificates` flag while trying to write the cert file. This is because a secret's volume mode is set to `0400` by default. See [docs](https://kubernetes.io/docs/concepts/configuration/secret/)
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: djsd123 Assign the PR to them by writing The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/assign @rf232 |
Codecov Report
@@ Coverage Diff @@
## master #2909 +/- ##
==========================================
- Coverage 54.17% 54.16% -0.01%
==========================================
Files 564 564
Lines 12199 12199
==========================================
- Hits 6609 6608 -1
- Misses 5334 5335 +1
Partials 256 256
Continue to review full report at Codecov.
|
Auto generate certs option behavior was changed to keep them in-memory in #2795 PR. Secret is only used as read-only in case user wants to override certificates with custom ones by creating/editing this secret. |
I'm closing this as this change is not needed due to #2795. |
Fair enough @floreks. Wierd that the |
Possibly you were using Dashboard |
The pod will error when using the
--auto-generate-certificates
flagwhile trying to write the cert file. This is because a secret's volume mode is set to
0400
by default. Seedocs