Skip to content

Unify GKE Autopilot settings #34

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
martinhv wants to merge 1 commit into from
Closed

Unify GKE Autopilot settings #34

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion deploy/charts/checkmk/templates/node-collector-container-metrics-ds.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ spec:
readOnly: true
- name: var-run
mountPath: /var/run
{{- if .Values.nodeCollector.cadvisor.volumeMountPermissions.var_run.readOnly }}
{{- if .Values.gkeAutopilot.enabled }}
readOnly: true
{{- end }}
- name: sys
Expand Down
7 changes: 1 addition & 6 deletions deploy/charts/checkmk/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ kubeVersionOverride: ""
## GKE Autopilot only allows privilegded workloads, if they are allowlisted.
## Requirement: Please first deploy the allowlist-synchronizer CRD [https://github.com/checkmk/checkmk_kube_agent/tree/main/deploy/manifests/gke-allowlist/cmk-allowlist-synchronizer.yaml]
## More info: https://cloud.google.com/kubernetes-engine/docs/how-to/run-autopilot-partner-workloads
## To deploy in GKE Autopilot, please set to true.
## To deploy in GKE Autopilot, please set to true. This will adapt the workloads to the specific requirements of GKE Autopilot.
gkeAutopilot:
enabled: false

Expand Down Expand Up @@ -223,11 +223,6 @@ nodeCollector:
- "--allow_dynamic_housekeeping=true"
- "--storage_duration=1m0s"

# For Google Kubernetes Engine (GKE) Autopilot, the readOnly needs to be set to true
volumeMountPermissions:
var_run:
readOnly: false

securityContext:
seccompProfile:
type: RuntimeDefault
Expand Down