✨ klusterlet spec mount /tmp to emptydir volume

[haowells]

Summary

In our internal enviroment, pod PSP add security context readOnlyRootFilesystem: true, this cause klusterlet container failed to start up due to this error
F1128 02:00:36.380318 1 cmd.go:161] mkdir /tmp/serving-cert-9
believe this

ocm/vendor/github.com/openshift/library-go/pkg/controller/controllercmd/cmd.go

Lines 259 to 267 in 2e7dba1

	config.ServingInfo.CertFile = filepath.Join(temporaryCertDir, "tls.crt")
	config.ServingInfo.KeyFile = filepath.Join(temporaryCertDir, "tls.key")
	// nothing can trust this, so we don't really care about hostnames
	servingCert, err := ca.MakeServerCert(sets.NewString("localhost"), 30)
	if err != nil {
	return nil, nil, err
	}
	if err := servingCert.WriteCertConfigFile(config.ServingInfo.CertFile, config.ServingInfo.KeyFile); err != nil {
	return nil, nil, err

code try to write something into /tmp dir

Related issue(s)

Fixes #

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (8a4c834) 61.76% compared to head (24cc1fb) 61.76%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #322   +/-   ##
=======================================
  Coverage   61.76%   61.76%           
=======================================
  Files         132      132           
  Lines       13989    13989           
=======================================
  Hits         8641     8641           
  Misses       4583     4583           
  Partials      765      765           

Flag	Coverage Δ
unit	61.76% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[qiujian16]

/approv

@elgnay PTAL

[elgnay]

/lgtm

[qiujian16]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: haowells, qiujian16

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [qiujian16]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment