Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update kubelet based openshift/node #161

Closed
wants to merge 1 commit into from

Conversation

strigazi
Copy link
Contributor

@strigazi strigazi commented Feb 8, 2018

Mount /sys/ as in node to avoid kubelet log:
Failed to get system container stats for
"/systemd/system.slice": failed to get cgroup stats
for "/systemd/system.slice": failed to get container
info for "/systemd/system.slice": unknown container
"/systemd/system.slice".

Mount /etc/pki to use the ca from the host.

Mount /var/run/secrets needed for f27 which doesn't have
kube installed and it is required by kubelet to manage
kubernetes secrets.

Mount tmp as tmpfs.

Mount cni dirs.

@rh-atomic-bot
Copy link

Can one of the admins verify this patch?
I understand the following commands:

  • bot, add author to whitelist
  • bot, test pull request
  • bot, test pull request once

@strigazi
Copy link
Contributor Author

strigazi commented Feb 8, 2018

@strigazi
Copy link
Contributor Author

strigazi commented Feb 8, 2018

@jasonbrooks The error that I mention in the commit message and I posted on the channel yesterday is fixed by mounting /sys/ like in openshift/node

@ashcrow
Copy link
Collaborator

ashcrow commented Feb 8, 2018

bot, test pull request

@strigazi
Copy link
Contributor Author

strigazi commented Feb 8, 2018

fixes #155 too

@strigazi strigazi force-pushed the update-kubelet branch 3 times, most recently from da74c71 to eea95b4 Compare February 8, 2018 17:59
@strigazi
Copy link
Contributor Author

strigazi commented Feb 8, 2018

@@ -0,0 +1,3 @@
d /etc/cni/net.d - - - - -
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do you want this to be a temporary file? systemd will destroy/recreate it on reboot.

If you want it to be persistent, you could do:

RUN mkdir -p /exports/hostfs/etc/cni/net.d

in your Dockerfile

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I created the dir in the dockerfile, do I also need to remove it from this list?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes please. Otherwise systemd-tmpfiles will still try to handle it.

@giuseppe
Copy link
Collaborator

giuseppe commented Feb 9, 2018

The mounts looks fine to me, just I have one inline comment

@strigazi
Copy link
Contributor Author

@jasonbrooks @ashcrow @giuseppe let's take this in?

@giuseppe
Copy link
Collaborator

@strigazi I still see "/etc/cni/net.d" in the tmpfiles.template file. Could you please drop that?

Beside this, it looks good to me, but I'd still like @jasonbrooks to take a look at the patch.

@rh-atomic-bot delegate=jasonbrooks

@rh-atomic-bot
Copy link

✌️ @jasonbrooks can now approve this pull request

@jasonbrooks
Copy link
Collaborator

@strigazi make that tmpfiles.template change and I'll approve

Mount /sys/ as in node to avoid kubelet log:
Failed to get system container stats for
"/systemd/system.slice": failed to get cgroup stats
for "/systemd/system.slice": failed to get container
info for "/systemd/system.slice": unknown container
"/systemd/system.slice".

Mount /etc/pki to use the ca from the host.

Mount /var/run/secrets needed for f27 which doesn't have
kube installed and it is required by kubelet to manage
kubernetes secrets.

Mount tmp as tmpfs.

Mount cni dirs.
@strigazi
Copy link
Contributor Author

done

@jasonbrooks
Copy link
Collaborator

@rh-atomic-bot r+ 88c81b7

@rh-atomic-bot
Copy link

⚡ Test exempted: pull fully rebased and already tested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants