openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update magnum from branch 'master'
  - Merge "fcos: Mount /:/rootfs:ro to Kubelet"
  - fcos: Mount /:/rootfs:ro to Kubelet
    
    Kubelet fails to handle SELinux labelling of Cinder PV without
    presenting the rootfs to Kubelet and as a result, an unprivileged
    container lacks the ability to access the path.
    
    With this patch, Kubelet handles the correct labelling automatically
    when a Cinder PV is attached to a pod.
    
    The default behaviour using system containers in Fedora Atomic is to
    mount rootfs [1] but we did not implement the same behaviour in Fedora
    CoreOS which was a mistake as this was a missing piece of code.
    
    [1] https://github.com/openstack/magnum/blob/master/dockerfiles/kubernetes-kubelet/config.json.template#L335
    
    Story: 2007413
    Task: 39129
    
    Change-Id: Id59c604928244bf49773b7519fa756d5b2814b69
This commit is contained in:
Zuul 2020-03-28 22:15:36 +00:00 committed by Gerrit Code Review
parent 28850b5f31
commit 2b6a1a1552
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
magnum

@ -1 +1 @@
Subproject commit 441a81910cc6bc6200835e1766ae2f7f09f8b719
Subproject commit 2e203dc92b604523a26f3208c8d908597cfacc00