mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-08-31 08:28:34 +00:00
runtime: fix k8s secret issue with remote hyp
kata-shim CCv0 does not propagate dynamically updated k8s secret values due to incorrect file name matching. This patch fixes the the wrong file name matching for k8s secret volume paths. Note that this problem has already fixed in the main branch. Fixes: #8208 Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
This commit is contained in:
@@ -293,7 +293,7 @@ func (f *FilesystemShare) ShareFile(ctx context.Context, c *Container, m *Mount)
|
||||
|
||||
// Add fsNotify watcher for volume mounts
|
||||
if strings.Contains(srcPath, "kubernetes.io~configmap") ||
|
||||
strings.Contains(srcPath, "kubernetes.io~secrets") ||
|
||||
strings.Contains(srcPath, "kubernetes.io~secret") ||
|
||||
strings.Contains(srcPath, "kubernetes.io~projected") ||
|
||||
strings.Contains(srcPath, "kubernetes.io~downward-api") {
|
||||
|
||||
|
Reference in New Issue
Block a user