Gitiles
Code Review Sign In
gerrit-dev.monogon.dev / monogon / 456961d6589c1afec75954ca94ed631e1f380566
commit456961d6589c1afec75954ca94ed631e1f380566[log] [tgz]
authorLorenz Brun <lorenz@monogon.tech>Tue Feb 20 13:18:26 2024 +0100
committerLorenz Brun <lorenz@monogon.tech>Tue Feb 20 18:12:12 2024 +0000
treeac99bfa39deefe0f4aca7478077a66ef8b7c9d74
parent1e90c6d29a4af63fa01b472b7a49bdba256797b2 [diff]
m/n/k/reconciler: set fsGroupPolicy for CSI driver

This fixes an issue where kubelet did not apply fsGroupChangePolicy due
to questionable capability detection code with the default
fsGroupPolicy. Setting this to the File policy asserts that this driver
always supports ownership changes and thus bypasses that Kubernetes
capability detection code.

Change-Id: I4799a01561af4f3d9c0de7a6040fd5f9db784d3e
Reviewed-on: https://review.monogon.dev/c/monogon/+/2784
Tested-by: Jenkins CI
Reviewed-by: Tim Windelschmidt <tim@monogon.tech>
1 file changed
tree: ac99bfa39deefe0f4aca7478077a66ef8b7c9d74
  1. .github/
  2. build/
  3. cloud/
  4. go/
  5. intellij/
  6. metropolis/
  7. net/
  8. third_party/
  9. tools/
  10. version/
  11. .bazelignore
  12. .bazelproject
  13. .bazelrc
  14. .bazelrc.sandboxroot
  15. .bazelversion
  16. .git-ignore-revs
  17. .gitignore
  18. BUILD.bazel
  19. CODING_STANDARDS.md
  20. go.mod
  21. go.sum
  22. LICENSE
  23. MODULE.bazel
  24. MODULE.bazel.lock
  25. README.md
  26. SETUP.md
  27. shell.nix
  28. WORKSPACE
README.md

Monogon Monorepo

This is the main repository containing the source code for the Monogon Platform.

This is pre-release software - take a look, and check back later!

Environment

Our build environment is self-contained and requires only minimal host dependencies:

  • A Linux machine or VM.
  • Bazelisk >= v1.15.0 (or a working Nix environment).
  • A reasonably recent kernel with user namespaces enabled.
  • Working KVM with access to /dev/kvm (if you want to run tests).

Our docs assume that Bazelisk is available as bazel on your PATH.

Refer to SETUP.md for detailed instructions.

Monogon OS

The source code lives in //metropolis (Metropolis is the codename of Monogon OS).

See the //metropolis/README.md for a developer quick start guide, or see the Monogon OS Handbook for user documentation.

Run a single node demo cluster

Build CLI and node image:

bazel build //metropolis/cli/dbg //:launch --config dbg

Launch an ephemeral test node:

bazel test //:launch --config dbg --test_output=streamed

Run a kubectl command while the test is running:

bazel-bin/metropolis/cli/dbg/dbg_/dbg kubectl describe node

Test suite

Run full test suite:

bazel test --config dbg //...