diff options
| author |   Bartek Grzybowski <b.grzybowski@partner.samsung.com> | 2021-06-10 12:16:15 +0200 |
|---|---|---|
| committer | Bartek Grzybowski <b.grzybowski@partner.samsung.com> | 2021-06-10 12:16:15 +0200 |
| commit | d357db8f1df643c268cc9c11c7cc43550ed17246 (patch) | |
| tree | 8b3d74fd468e143e427c006af671265ca6cf9152 | |
| parent | e0489b69254aa7bef77b281280f869a612a89468 (diff) | |
[ANSIBLE] Create host paths for PVs and set their permissions
Access mode for hostPath type kubernetes PVs has to be set
explicitly as setting it with pod's securityContext is not
supported.
Change-Id: I60ed71001fc7859440510f17c1989b35d28c37b5
Issue-ID: INT-1926
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
| -rw-r--r-- | ansible/roles/k8s-persistent-volume/defaults/main.yml | 2 | ||||
| -rw-r--r-- | ansible/roles/k8s-persistent-volume/tasks/main.yml | 8 |
2 files changed, 10 insertions, 0 deletions
diff --git a/ansible/roles/k8s-persistent-volume/defaults/main.yml b/ansible/roles/k8s-persistent-volume/defaults/main.yml index 5260db11..d1a2b69c 100644 --- a/ansible/roles/k8s-persistent-volume/defaults/main.yml +++ b/ansible/roles/k8s-persistent-volume/defaults/main.yml @@ -3,3 +3,5 @@ k8s_volumes: - name: kube-prometheus capacity: "6Gi" path_prefix: "{{ nfs_mount_path }}" + owner: 1000 # derived from prometheus.prometheusSpec.securityContext.runAsUser + group: 2000 # derived from prometheus.prometheusSpec.securityContext.fsGroup diff --git a/ansible/roles/k8s-persistent-volume/tasks/main.yml b/ansible/roles/k8s-persistent-volume/tasks/main.yml index 94f4e0b3..8428857f 100644 --- a/ansible/roles/k8s-persistent-volume/tasks/main.yml +++ b/ansible/roles/k8s-persistent-volume/tasks/main.yml @@ -9,3 +9,11 @@ wait: True template: pv.yaml.j2 loop: "{{ k8s_volumes }}" + +- name: Create host paths for PVs and set their permissions + file: + path: "{{ item.path_prefix }}/{{ item.name }}" + state: directory + owner: "{{ item.owner | default(0) }}" + group: "{{ item.group | default(0) }}" + loop: "{{ k8s_volumes }}" |