Enhance the ops-pod Pod spec

ialidzhikov commented 2 years ago

/kind enhancement

This PR:

Adds the option mountPropagation=HostToContainer to the volumeMount. Without this option in some environments the ops Pod won't receive information about subsequent mounts on the host. This prevents an operator to debug mount issues on the Node. Ref https://kubernetes.io/docs/concepts/storage/volumes/#mount-propagation
Disables service link. In namespaces with a lot of Services the ops Pod creation can fail without this setting. By default kubelet injects information for all services as env variables to the Pod. Ref https://kubernetes.io/docs/concepts/services-networking/connect-applications-service/#accessing-the-service

Credits to @dguendisch

Release note:

NONE

petersutter commented 2 years ago

plkokanov commented 2 years ago

@ialidzhikov you can rebase the PR now, then the checks should pass. /needs rebase

ialidzhikov commented 2 years ago

/remove needs/rebase

gardener / ops-toolbelt