Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable precreate subpaths property by default in templates #12513

Merged
merged 1 commit into from
Jan 26, 2019

Conversation

amisevsk
Copy link
Contributor

What does this PR do?

Set CHE_INFRA_KUBERNETES_PVC_PRECREATE__SUBPATHS=true by default in deploy scripts for Che. This is necessary to work around issue #12445 (see comment on issue for details)

What issues does this PR fix or reference?

#12445

The property CHE_INFRA_KUBERNETES_PVC_PRECREATE__SUBPATHS is required
for PVC cleanup on current versions of Kubernetes/OpenShift.

Without the property enabled, subpaths are created in PVCs by Kubernetes
when they are needed for pods. However, only the leaf directory created
in this way has write permissions for nonroot users. As a result, the
cleanup pod cannot delete directories created (e.g. the
workspaceX/projects) directory.

For more details, see eclipse-che#12445

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
@amisevsk amisevsk added kind/bug Outline of a bug - must adhere to the bug report template. status/code-review This issue has a pull request posted for it and is awaiting code review completion by the community. labels Jan 24, 2019
@amisevsk amisevsk requested review from sleshchenko and a user January 24, 2019 22:05
Copy link
Member

@sleshchenko sleshchenko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

You mentioned that it is needed for work around issue #12445. Should we create an issue to track solution on Kubernetes side and revert it when no work around will be needed?
Sorry If you described it somewhere in your investigation report but I missed it.

@amisevsk
Copy link
Contributor Author

@sleshchenko There currently isn't an issue on the Kubernetes side for changing this, as far as I can tell. I need to do some more investigation to see if it's worth opening an upstream issue -- my understanding is that kube gives no guarantee for subpaths.

@amisevsk amisevsk merged commit 40131c3 into eclipse-che:master Jan 26, 2019
@che-bot che-bot removed the status/code-review This issue has a pull request posted for it and is awaiting code review completion by the community. label Jan 26, 2019
@che-bot che-bot added this to the 6.18.0 milestone Jan 26, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Outline of a bug - must adhere to the bug report template.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants