You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Run a kube deployment with several containers without access to outside world. Only allow access from outside via a few endpoints using systemd socket activation.
What I tried:
Created a systemd .kube file, systemd .socket file and the corresponding yaml kubernetes config. The .kube file depends on a systemd socket.
Result:
Containers do not inherit the systemd socket. Seems that only the -services container inherits the socket, but that makes it useless.,
I can run this setup using a systemd pod, but I found this configuration to be less ergonomic. It needs a bunch of separate files to describe the setup and it is not possible to generate it from an existing set of containers as podman kube generate does.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
What I want:
Run a kube deployment with several containers without access to outside world. Only allow access from outside via a few endpoints using systemd socket activation.
What I tried:
Created a systemd .kube file, systemd .socket file and the corresponding yaml kubernetes config. The .kube file depends on a systemd socket.
Result:
Containers do not inherit the systemd socket. Seems that only the
-services
container inherits the socket, but that makes it useless.,I can run this setup using a systemd pod, but I found this configuration to be less ergonomic. It needs a bunch of separate files to describe the setup and it is not possible to generate it from an existing set of containers as
podman kube generate
does.Question:
Is there a way to make this work with a kube?
more info in eriksjolund/podman-traefik-socket-activation#3
Beta Was this translation helpful? Give feedback.
All reactions