search

bitnami / containers

Bitnami container images
https://bitnami.com
Other
3.41k stars 4.87k forks source link

[bitnami/opensearch] does not work with readOnlyRootFilesystem = true #52992

Open scheffold opened 12 months ago

scheffold commented 12 months ago

Name and Version

bitnami/opensearch:0.4.1

What architecture are you using?

amd64

What steps will reproduce the bug?

Deploying bitnami/opensearch chart with containerSecurityContext configuration readOnlyRootFilesystem: true leads to following error:

Defaulted container "opensearch" out of: opensearch, sysctl (init)
opensearch 17:10:45.19
opensearch 17:10:45.59 Welcome to the Bitnami opensearch container
opensearch 17:10:45.70 Subscribe to project updates by watching https://github.com/bitnami/containers
opensearch 17:10:45.79 Submit issues and feature requests at https://github.com/bitnami/containers/issues
opensearch 17:10:46.30
opensearch 17:10:46.49 INFO  ==> ** Starting Opensearch setup **
opensearch 17:10:49.29 INFO  ==> Configuring/Initializing Opensearch...
opensearch 17:10:52.30 INFO  ==> Setting default configuration
touch: cannot touch '/opt/bitnami/opensearch/config/opensearch.yml': Read-only file system

Pod stays in status CrashLoopBackOff

What is the expected behavior?

No response

What do you see instead?

Container should start with readOnlyRootFilesystem= true

Additional information

No response

javsalgar commented 11 months ago

Hi,

At the moment, I'm afraid this is expected. We are working on adding support for readOnlyRootFilesystem in our solutions (for example, recent solutions like Milvus or Deepspeed come with it out of the box). As soon as there updates on this, we will notify the community.