mount /tmp as emptyDir in all pods to workaround owncloud/ocis#10378

wkloucek · Oct 22, 2024 · 531a08d · 531a08d
1 parent 40f4bf4
commit 531a08d
Show file tree

Hide file tree

Showing 24 changed files with 113 additions and 5 deletions.
diff --git a/charts/ocis/templates/activitylog/deployment.yaml b/charts/ocis/templates/activitylog/deployment.yaml
@@ -80,12 +80,16 @@ spec:
               containerPort: 9197
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/antivirus/deployment.yaml b/charts/ocis/templates/antivirus/deployment.yaml
@@ -70,12 +70,16 @@ spec:
               containerPort: 9277
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/audit/deployment.yaml b/charts/ocis/templates/audit/deployment.yaml
@@ -60,12 +60,16 @@ spec:
               containerPort: 9229
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/clientlog/deployment.yaml b/charts/ocis/templates/clientlog/deployment.yaml
@@ -74,12 +74,16 @@ spec:
               containerPort: 9260
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/eventhistory/deployment.yaml b/charts/ocis/templates/eventhistory/deployment.yaml
@@ -65,12 +65,16 @@ spec:
               containerPort: 9270
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/frontend/deployment.yaml b/charts/ocis/templates/frontend/deployment.yaml
@@ -175,10 +175,10 @@ spec:
               containerPort: 9141
 
           volumeMounts:
-            - name: configs
-              mountPath: /etc/ocis
             - name: tmp-volume
               mountPath: /tmp
+            - name: configs
+              mountPath: /etc/ocis
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:

diff --git a/charts/ocis/templates/graph/deployment.yaml b/charts/ocis/templates/graph/deployment.yaml
@@ -221,6 +221,8 @@ spec:
               containerPort: 9124
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
@@ -230,6 +232,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/idm/deployment.yaml b/charts/ocis/templates/idm/deployment.yaml
@@ -120,6 +120,8 @@ spec:
               containerPort: 9239
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: ldap-cert
               mountPath: /etc/ocis/ldap-cert
               readOnly: true
@@ -128,6 +130,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: ldap-cert
           secret:
             secretName: {{ include "secrets.ldapCertSecret" . }}

diff --git a/charts/ocis/templates/idp/deployment.yaml b/charts/ocis/templates/idp/deployment.yaml
@@ -83,6 +83,8 @@ spec:
               containerPort: 9134
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: ocis-data-tmp
               mountPath: /var/lib/ocis # we mount that volume to apply fsGroup to that path, so that the idp can write the temporary idp/tmp/identifier-registration.yaml file
             - name: ldap-ca
@@ -94,6 +96,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: ocis-data-tmp
           emptyDir: {}
         - name: ldap-ca

diff --git a/charts/ocis/templates/nats/deployment.yaml b/charts/ocis/templates/nats/deployment.yaml
@@ -74,10 +74,14 @@ spec:
               containerPort: 9234
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: {{ include "ocis.persistence.dataVolumeName" . }}
               mountPath: /var/lib/ocis
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         {{- include "ocis.persistence.dataVolume" . | nindent 8 }}
 {{- end }}
diff --git a/charts/ocis/templates/notifications/deployment.yaml b/charts/ocis/templates/notifications/deployment.yaml
@@ -106,6 +106,8 @@ spec:
               containerPort: 9174
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
@@ -120,6 +122,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/ocdav/deployment.yaml b/charts/ocis/templates/ocdav/deployment.yaml
@@ -79,4 +79,12 @@ spec:
               containerPort: 8080
             - name: metrics-debug
               containerPort: 9163
+
+          volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
+
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
+      volumes:
+        - name: tmp-volume
+          emptyDir: {}
diff --git a/charts/ocis/templates/ocs/deployment.yaml b/charts/ocis/templates/ocs/deployment.yaml
@@ -72,4 +72,12 @@ spec:
               containerPort: 9110
             - name: metrics-debug
               containerPort: 9114
+
+          volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
+
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
+      volumes:
+        - name: tmp-volume
+          emptyDir: {}
diff --git a/charts/ocis/templates/policies/deployment.yaml b/charts/ocis/templates/policies/deployment.yaml
@@ -67,6 +67,8 @@ spec:
               containerPort: 9129
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
@@ -76,6 +78,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/postprocessing/deployment.yaml b/charts/ocis/templates/postprocessing/deployment.yaml
@@ -76,12 +76,16 @@ spec:
               containerPort: 9255
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/proxy/deployment.yaml b/charts/ocis/templates/proxy/deployment.yaml
@@ -136,11 +136,15 @@ spec:
               containerPort: 9205
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: configs
               mountPath: /etc/ocis
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: configs
           configMap:
             name: {{ .appName }}-config
diff --git a/charts/ocis/templates/search/deployment.yaml b/charts/ocis/templates/search/deployment.yaml
@@ -114,6 +114,8 @@ spec:
               containerPort: 9224
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
@@ -122,6 +124,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/settings/deployment.yaml b/charts/ocis/templates/settings/deployment.yaml
@@ -106,22 +106,26 @@ spec:
             - name: metrics-debug
               containerPort: 9194
 
-          {{- if or .Values.features.roles.customRoles .Values.features.roles.customRolesConfigRef }}
+
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
+          {{- if or .Values.features.roles.customRoles .Values.features.roles.customRolesConfigRef }}
             - name: ocis-role-config
               mountPath: /etc/ocis
           {{- end }}
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
 
-      {{- if .Values.features.roles.customRoles }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
+      {{- if .Values.features.roles.customRoles }}
         - name: ocis-role-config
           configMap:
             name: {{ .appName }}-role-config
       {{- end }}
       {{- if .Values.features.roles.customRolesConfigRef }}
-      volumes:
         - name: ocis-role-config
           configMap:
             name: {{ .Values.features.roles.customRolesConfigRef }}

diff --git a/charts/ocis/templates/sse/deployment.yaml b/charts/ocis/templates/sse/deployment.yaml
@@ -70,12 +70,16 @@ spec:
               containerPort: 9135
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/thumbnails/deployment.yaml b/charts/ocis/templates/thumbnails/deployment.yaml
@@ -101,9 +101,13 @@ spec:
               containerPort: 9189
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: {{ include "ocis.persistence.dataVolumeName" . }}
               mountPath: /var/lib/ocis
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         {{- include "ocis.persistence.dataVolume" . | nindent 8 }}
diff --git a/charts/ocis/templates/userlog/deployment.yaml b/charts/ocis/templates/userlog/deployment.yaml
@@ -102,12 +102,16 @@ spec:
               containerPort: 9210
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: messaging-system-ca
               mountPath: /etc/ocis/messaging-system-ca
               readOnly: true
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: messaging-system-ca
           {{ if and (.Values.messagingSystem.external.enabled) (not .Values.messagingSystem.external.tls.certTrusted) }}
           secret:

diff --git a/charts/ocis/templates/web/deployment.yaml b/charts/ocis/templates/web/deployment.yaml
@@ -199,6 +199,8 @@ spec:
               containerPort: 9104
 
           volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
             - name: configs
               mountPath: /etc/ocis
             {{- if .Values.configRefs.webThemeConfigRef }}
@@ -216,6 +218,8 @@ spec:
 
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
       volumes:
+        - name: tmp-volume
+          emptyDir: {}
         - name: configs
           configMap:
             name: {{ .appName }}-config

diff --git a/charts/ocis/templates/webdav/deployment.yaml b/charts/ocis/templates/webdav/deployment.yaml
@@ -62,4 +62,12 @@ spec:
               containerPort: 9115
             - name: metrics-debug
               containerPort: 9119
+
+          volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
+
       {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
+      volumes:
+        - name: tmp-volume
+          emptyDir: {}