Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Super Charging Persistence #769

Open
wants to merge 2 commits into
base: 2022.4
Choose a base branch
from

Conversation

stormmore
Copy link

This MR is based on the my experience of running Aqua scanners in an OpenShift environment. This is back porting the fixes we have implemented in our clusters including production clusters.

Issues addressed

OpenShift security context doesn't allow for PVC for Aqua Scanner.

Due to having a separate PVC associated with the Statefulset with a fixed name, the current charts limits to only one scanner with persistence if your storage is only capable of ReadWriteOnce.

It isn't possible to add volumes and mount points potentially necessary for other tools to cooperate for the scanners.

Solutions

For the first problem, adding persistentVolumeClaim to the SecurityContextConstraints.

For the last problem, 2 additional variables have been created and mapped appropriately to both volumes and volumeMounts, called additionalVolumes and addtionalVolumeMounts respectively, e.g. #691

For the main problem, reverted change that resulted in the removal of the volumeMountTemplate in the case where accessMode is ReadWriteOnce and replicaCount is greater than 1. Using volumeMountTemplate in this way creates a unique pvc per scanner, getting around the limitation of storage that can only have one pod at a time have write access.

@CLAassistant
Copy link

CLAassistant commented Sep 7, 2023

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants