mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2025-10-17 10:31:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: create symlinks to /etc/ssl/certs

Browse Source 
In order to accomodate the various ways that SSL certs are managed by
the different Linux distros, kubeadm creates control plane compoents
with volume mounts of the type DirectoryOrCreate to all well known SSL
cert locations. This change creates symlinks to /etc/ss/certs at all the
well known paths to account for the fact that the rootfs is read-only.

Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
This commit is contained in:
Andrew Rynhard 2019-07-16 22:57:20 +00:00
parent 8e8aae98dd
commit fe2b81f4b4
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
internal/pkg/rootfs/rootfs.go
View File

@ -67,11 +67,23 @@ func Prepare(s string, inContainer bool, data *userdata.UserData) (err error) {
}
// Create required directories that are not part of FHS.
for _, p := range []string{"/etc/kubernetes/manifests", "/etc/cni", "/var/lib/kubelet", "/var/log/pods", "/usr/libexec/kubernetes"} {
if err = os.MkdirAll(filepath.Join(s, p), 0700); err != nil {
for _, path := range []string{"/etc/kubernetes/manifests", "/etc/cni", "/var/lib/kubelet", "/var/log/pods", "/usr/libexec/kubernetes"} {
if err = os.MkdirAll(filepath.Join(s, path), 0700); err != nil {
return err
}
}
// Create symlinks to /etc/ssl/certs as required by the control plane.
for _, path := range []string{"/etc/pki", "/usr/share/ca-certificates", "/usr/local/share/ca-certificates", "/etc/ca-certificates"} {
if _, err = os.Stat(path); os.IsNotExist(err) {
target := filepath.Join(s, path)
if err = os.MkdirAll(filepath.Dir(target), 0700); err != nil {
return err
}
if err = os.Symlink("/etc/ssl/certs", target); err != nil {
return err
}
}
}
// Create /etc/os-release.
if err = etc.OSRelease(s); err != nil {
return