From 638eb21ccdee8fb7b252fd2b384a4eb0de2eec82 Mon Sep 17 00:00:00 2001 From: Heron Vieira Date: Wed, 9 Nov 2022 10:10:08 -0300 Subject: [PATCH] Configure k8s-coredump token on other nodes Copy k8s-coredump token on install for secondary controller nodes and worker nodes. Test Plan: PASS: Install and bootstrap Standard system PASS: Verify if /etc/k8s-coredump-conf.json file is created on all controller and compute nodes. Regression: PASS: After bootstrap, create and crash a pod with annotations configured and verify if coredump is generated on pod namespace on each node. PASS: After bootstrap, crash a non k8s application and verify that the coredump is generated as previously (by systemd-coredump) on each node. Depends-On: https://review.opendev.org/c/starlingx/ansible-playbooks/+/864113 Closes-bug: 1996054 Signed-off-by: Heron Vieira Change-Id: Ib15b84ca8cc8ca870a21d314f6ee2b7193532aa1 --- .../controllerconfig/scripts/controller_config | 12 ++++++++++++ workerconfig/workerconfig/worker_config | 12 ++++++++++++ 2 files changed, 24 insertions(+) diff --git a/controllerconfig/controllerconfig/scripts/controller_config b/controllerconfig/controllerconfig/scripts/controller_config index 31bc25274d..17f4ff1fef 100755 --- a/controllerconfig/controllerconfig/scripts/controller_config +++ b/controllerconfig/controllerconfig/scripts/controller_config @@ -486,6 +486,18 @@ start() fi fi + # Copy over k8s-coredump-handler token + if [ -e $CONFIG_DIR/k8s-coredump-conf.json ] + then + cp $CONFIG_DIR/k8s-coredump-conf.json /etc/k8s-coredump-conf.json + if [ $? -ne 0 ] + then + fatal_error "Unable to copy k8s-coredump-handler token config file" + else + chmod 600 /etc/k8s-coredump-conf.json + fi + fi + if [ ! -e "${ACTIVE_CONTROLLER_NOT_FOUND_FLAG}" ] then # Keep the /opt/branding directory to preserve any new files diff --git a/workerconfig/workerconfig/worker_config b/workerconfig/workerconfig/worker_config index dd3872bbeb..d1dd50fe6e 100644 --- a/workerconfig/workerconfig/worker_config +++ b/workerconfig/workerconfig/worker_config @@ -272,6 +272,18 @@ start() fi fi + # Copy over k8s-coredump-handler token + if [ -e $CONFIG_DIR/k8s-coredump-conf.json ] + then + cp $CONFIG_DIR/k8s-coredump-conf.json /etc/k8s-coredump-conf.json + if [ $? -ne 0 ] + then + fatal_error "Unable to copy k8s-coredump-handler token config file" + else + chmod 600 /etc/k8s-coredump-conf.json + fi + fi + # banner customization always returns 0, success: /usr/sbin/install_banner_customization