From 916e2d6691874c1257377192fd471c696450e6d1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Natalie=20Klestrup=20R=C3=B6ijezon?= Date: Wed, 19 Mar 2025 10:20:16 +0100 Subject: [PATCH 1/2] Add notes about kubeletDirs for Tanzu/Huawei/IBM Fixes #286 Copied over from secret-operator --- .../listener-operator/pages/installation.adoc | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/docs/modules/listener-operator/pages/installation.adoc b/docs/modules/listener-operator/pages/installation.adoc index e8af200c..42e05830 100644 --- a/docs/modules/listener-operator/pages/installation.adoc +++ b/docs/modules/listener-operator/pages/installation.adoc @@ -41,3 +41,24 @@ You're now ready to expose services! Microk8s uses a non-standard Kubelet state directory. Installing listener-operator on Microk8s requires the argument `--set kubeletDir=/var/snap/microk8s/common/var/lib/kubelet` to be added to the `helm install` command. + +=== HUAWEI cloud + +In some cases HUAWEI cloud has the kubelet directory located at `/mnt/paas/kubernetes/kubelet`, resulting in the following error: + +`failed to publish volume error=status: Unavailable, message: "failed to create secret parent dir /mnt/paas/kubernetes/kubelet/pods//volumes/kubernetes.io~csi/pvc-/mount: No such file or directory (os error 2)"` + +In case you are encountering the mentioned error (or listener-operator does not work on your HUAWEI cloud at all), you need to add the argument `--set kubeletDir=/mnt/paas/kubernetes/kubelet` to the `helm install` command. + +=== IBM cloud + +In some cases IBM cloud has the kubelet directory located at `/var/data/kubelet/`, resulting in the following error: + +`failed to publish volume error=status: Unavailable, message: "failed to create secret parent dir /var/data/kubelet/pods//volumes/kubernetes.io~csi/pvc-/mount: No such file or directory (os error 2)"` + +In case you are encountering the mentioned error (or listener-operator does not work on your IBM cloud at all), you need to add the argument `--set kubeletDir=/var/data/kubelet` to the `helm install` command. + +=== VMware Tanzu + +VMware Tanzu uses a non-standard Kubelet state directory. Installing listener-operator on Tanzu requires the argument +`--set kubeletDir=/var/vcap/data/kubelet` to be added to the `helm install` command. From 0c8c68775cbbe305e5a338a02f954510499608d2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Natalie=20Klestrup=20R=C3=B6ijezon?= Date: Tue, 18 Mar 2025 04:37:13 +0100 Subject: [PATCH 2/2] Ignore RUSTSEC-2025-0012 for now --- deny.toml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/deny.toml b/deny.toml index 2c0138d0..b256f323 100644 --- a/deny.toml +++ b/deny.toml @@ -29,6 +29,15 @@ ignore = [ # # TODO: Remove after https://github.com/kube-rs/kube/pull/1652 is merged "RUSTSEC-2024-0384", + + # https://rustsec.org/advisories/RUSTSEC-2025-0012 + # "backoff" is unmainted. + # + # Upstream (kube) has switched to backon in 0.99.0, and an upgrade is scheduled on our end. In the meantime, + # this is a very low-severity problem. + # + # TODO: Remove after upgrading to kube 0.99. + "RUSTSEC-2025-0012", ] [bans]