Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process * More improvements in chroot * Fix charts and some file locations * Fix symlink on non chrooted container * fix psp test * Add e2e tests to chroot image * Fix logger * Add internal logger in controller * Fix overlay for chrooted tests * Fix tests * fix boilerplates * Fix unittest to point to the right pid * Fix PR review
This commit is contained in:
parent
83ce21b4dd
commit
3def835a6a
41 changed files with 456 additions and 49 deletions
|
|
@ -28,7 +28,7 @@ import (
|
|||
"time"
|
||||
|
||||
ps "github.com/mitchellh/go-ps"
|
||||
"k8s.io/klog/v2"
|
||||
klog "k8s.io/klog/v2"
|
||||
)
|
||||
|
||||
// TODO: Check https://github.com/kubernetes/kubernetes/blob/master/pkg/master/ports/ports.go for ports already being used
|
||||
|
|
@ -40,7 +40,7 @@ var ProfilerPort = 10245
|
|||
var TemplatePath = "/etc/nginx/template/nginx.tmpl"
|
||||
|
||||
// PID defines the location of the pid file used by NGINX
|
||||
var PID = "/tmp/nginx.pid"
|
||||
var PID = "/tmp/nginx/nginx.pid"
|
||||
|
||||
// StatusPort port used by NGINX for the status server
|
||||
var StatusPort = 10246
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue