Skip to content

Commit c90b573

Browse files
author
Michael Burke
committed
OSDOCS-5348: Module Automate workaround for SELinux relabeling issue for large volumes
1 parent 603951c commit c90b573

File tree

2 files changed

+24
-0
lines changed

2 files changed

+24
-0
lines changed
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * nodes/nodes-pods-configuring.adoc
4+
// * nodes/nodes-cluster-pods-configuring
5+
6+
:_content-type: REFERENCE
7+
[id="nodes-pods-configuring-reducing_{context}"]
8+
= Reducing pod timeouts when using persistent volumes with high file counts
9+
10+
If a storage volume contains many files (~1,000,000 or greater), you might experience pod timeouts.
11+
12+
This can occur because, when volumes are mounted, {product-title} recursively changes the ownership and permissions of the contents of each volume in order to match the `fsGroup` specified in a pod's `securityContext`. For large volumes, checking and changing the ownership and permissions can be time consuming, resulting in a very slow pod startup.
13+
14+
You can reduce this delay by applying one of the following workarounds:
15+
16+
* Use a security context constraint (SCC) to skip the SELinux relabeling for a volume.
17+
18+
* Use the `fsGroupChangePolicy` field inside an SCC to control the way that {product-title} checks and manages ownership and permissions for a volume.
19+
20+
* Use a runtime class to skip the SELinux relabeling for a volume.
21+
22+
For information, see link:https://access.redhat.com/solutions/6221251[When using Persistent Volumes with high file counts in OpenShift, why do pods fail to start or take an excessive amount of time to achieve "Ready" state?].

nodes/pods/nodes-pods-configuring.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@ include::modules/nodes-pods-pod-disruption-configuring.adoc[leveloffset=+2]
2828

2929
include::modules/nodes-pods-configuring-pod-critical.adoc[leveloffset=+1]
3030

31+
include::modules/nodes-pods-configuring-reducing.adoc[leveloffset=+1]
32+
3133
// modules/nodes-pods-configuring-run-once.adoc[leveloffset=+1]
3234

3335

0 commit comments

Comments
 (0)