reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update daemonset manifest to mount /etc/machine-id

Browse Source 
Mounted as ReadOnly in order to minimize attack surface as in #3880
This commit is contained in:
Alex Vest committed 2021-01-21 18:00:26 +00:00
1 parent 164175160a
commit 9a2682671c
3 files changed
+18
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

prog/weave-kube/weave-daemonset-k8s-1.11.yaml
+6
View File
@@ -169,6 +169,9 @@ items:
- name: dbus
mountPath: /host/var/lib/dbus
readOnly: true
- mountPath: /host/etc/machine-id
name: cni-machine-id
readOnly: true
- name: xtables-lock
mountPath: /run/xtables.lock
readOnly: false
@@ -216,6 +219,9 @@ items:
- name: cni-conf
hostPath:
path: /etc
- name: cni-machine-id
hostPath:
path: /etc/machine-id
- name: dbus
hostPath:
path: /var/lib/dbus
prog/weave-kube/weave-daemonset-k8s-1.8.yaml
+6
View File
@@ -166,6 +166,9 @@ items:
- name: dbus
mountPath: /host/var/lib/dbus
readOnly: true
- mountPath: /host/etc/machine-id
name: cni-machine-id
readOnly: true
- name: xtables-lock
mountPath: /run/xtables.lock
readOnly: false
@@ -212,6 +215,9 @@ items:
- name: cni-conf
hostPath:
path: /etc
- name: cni-machine-id
hostPath:
path: /etc/machine-id
- name: dbus
hostPath:
path: /var/lib/dbus
prog/weave-kube/weave-daemonset-k8s-1.9.yaml
+6
View File
@@ -169,6 +169,9 @@ items:
- name: dbus
mountPath: /host/var/lib/dbus
readOnly: true
- mountPath: /host/etc/machine-id
name: cni-machine-id
readOnly: true
- name: xtables-lock
mountPath: /run/xtables.lock
readOnly: false
@@ -216,6 +219,9 @@ items:
- name: cni-conf
hostPath:
path: /etc
- name: cni-machine-id
hostPath:
path: /etc/machine-id
- name: dbus
hostPath:
path: /var/lib/dbus