✨ Able to run controller inside the container platform with write acc…

…ess to root restrictions
kubernetes-sigs · Dec 5, 2024 · 041eca1 · 041eca1
1 parent 80af83d
commit 041eca1
Showing 1 changed file with 22 additions and 5 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -30,11 +30,22 @@ spec:
           type: RuntimeDefault
       containers:
         - args:
-          - --leader-elect
-          - "--diagnostics-address=${CAAPH_DIAGNOSTICS_ADDRESS:=:8443}"
-          - "--insecure-diagnostics=${CAAPH_INSECURE_DIAGNOSTICS:=false}"
-          - "--sync-period=${CAAPH_SYNC_PERIOD:=10m}"
-          - "--v=2"
+            - --leader-elect
+            - "--diagnostics-address=${CAAPH_DIAGNOSTICS_ADDRESS:=:8443}"
+            - "--insecure-diagnostics=${CAAPH_INSECURE_DIAGNOSTICS:=false}"
+            - "--sync-period=${CAAPH_SYNC_PERIOD:=10m}"
+            - "--v=2"
+          env:
+            - name: XDG_DATA_HOME
+              value: /tmp/.local/share
+            - name: XDG_CONFIG_HOME
+              value: /tmp/.config
+            - name: XDG_STATE_HOME
+              value: $HOME/.local/state
+            - name: XDG_CACHE_HOME
+              value: /tmp/.cache
+            - name: XDG_CONFIG_DIRS
+              value: /tmp/xdg
           image: controller:latest
           imagePullPolicy: Always
           name: manager
@@ -65,6 +76,12 @@ spec:
               port: healthz
             initialDelaySeconds: 10
             periodSeconds: 10
+          volumeMounts:
+            - mountPath: /tmp
+              name: tmp
+      volumes:
+        - emptyDir: { }
+          name: tmp
           # TODO(user): Configure the resources accordingly based on the project requirements.
           # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
           # resources: