runtime: fix k8s secret issue with remote hyp

kata-shim CCv0 does not propagate dynamically
updated k8s secret values due to incorrect
file name matching. This patch fixes the the wrong file
name matching for k8s secret volume paths.

Note that this problem has already fixed in the main
branch.

Fixes: #8208
Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
This commit is contained in:
Yohei Ueda
2023-10-12 15:07:10 +09:00
parent 64392c9a87
commit d9c9040474

View File

@@ -293,7 +293,7 @@ func (f *FilesystemShare) ShareFile(ctx context.Context, c *Container, m *Mount)
// Add fsNotify watcher for volume mounts
if strings.Contains(srcPath, "kubernetes.io~configmap") ||
strings.Contains(srcPath, "kubernetes.io~secrets") ||
strings.Contains(srcPath, "kubernetes.io~secret") ||
strings.Contains(srcPath, "kubernetes.io~projected") ||
strings.Contains(srcPath, "kubernetes.io~downward-api") {