Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Asset-Manager: switch to EFS CSI driver and PersistentVolumeClaim #514

Merged
merged 1 commit into from
Aug 16, 2022

Conversation

fredericfran-gds
Copy link
Contributor

Due to the issue with non-root asset-manager trying to use a root
NFS volume created in AWS/terraform directly. We move to using the
EFS CSI driver and PersistentVolumeClaim.

See related PR: alphagov/govuk-infrastructure#725

Copy link
Contributor

@nsabri1 nsabri1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

server: "{{ .Values.clamavNFS }}"
path: /
persistentVolumeClaim:
claimName: clamav-db
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: double indent?

Suggested change
claimName: clamav-db
claimName: clamav-db

@@ -0,0 +1,11 @@
apiVersion: v1
kind: PersistentVolumeClaim
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm guessing the EFS CSI driver takes care of the PersistentVolume side of things and that's why we don't define a PersistentVolume ourselves? Is that right?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep

Due to the issue with non-root asset-manager trying to use a root
NFS volume created in AWS/terraform directly. We move to using the
EFS CSI driver and PersistentVolumeClaim.

See related PR: alphagov/govuk-infrastructure#725
@fredericfran-gds fredericfran-gds merged commit 679df44 into main Aug 16, 2022
@fredericfran-gds fredericfran-gds deleted the efs_asset_manager branch August 16, 2022 16:28
nimalank7 added a commit to alphagov/govuk-infrastructure that referenced this pull request Dec 5, 2024
Description:
- #725 introduced the EBS CSI Driver which created EFS for ClamAV
- Next alphagov/govuk-helm-charts#508 allowed ClamAV to talk to EFS over NFS exposing over clamav-db-govuk.integration.govuk-internal.digital
- However this didn’t work so ClamAV was switched to use the EFS CSI driver in alphagov/govuk-helm-charts#514. But this removes the reference to clamav-db-govuk.integration.govuk-internal.digital
- #790 removes the EFS CSI driver
- Next alphagov/govuk-helm-charts#572 makes ClamAV share the EFS instance via the same NFS mount as asset manager.
- Now there is a dangling reference to ClamAV EFS instance which can be safely removed as nothing references it anymore.
- As part of alphagov/govuk-helm-charts#1883
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants