Extend functionality of Test Mode to enable privileged mode for Segment Store containers #507
Comments
leapsky
pushed a commit
to leapsky/pravega-operator
that referenced
this issue
Feb 16, 2021
…nt Store containers pravega#507
leapsky
pushed a commit
to leapsky/pravega-operator
that referenced
this issue
Feb 16, 2021
…nt Store containers pravega#507 Signed-off-by: Pavel Lipsky <[email protected]>
leapsky
pushed a commit
to leapsky/pravega-operator
that referenced
this issue
Mar 3, 2021
…or Segment Store containers pravega#507" This reverts commit 265ec03.
leapsky
pushed a commit
to leapsky/pravega-operator
that referenced
this issue
Mar 3, 2021
…nt Store containers pravega#507
anishakj
pushed a commit
that referenced
this issue
Mar 3, 2021
#508) * Extend functionality of Test Mode to enable privileged mode for Segment Store containers #507 Signed-off-by: Pavel Lipsky <[email protected]> * Revert "Extend functionality of Test Mode to enable privileged mode for Segment Store containers #507" This reverts commit 265ec03. * Add the privileged property to segmentStoreSecurityContext * Extend functionality of Test Mode to enable privileged mode for Segment Store containers #507 * Fix the formatting * Revert "Add the privileged property to segmentStoreSecurityContext" This reverts commit dd3bf15. Co-authored-by: Pavel Lipsky <[email protected]> Co-authored-by: Pavel Lipsky <[email protected]>
|
Fixed by PR #508 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
By default, Docker containers run in unprivileged mode. However, to profile the applications, we use tracers (e.g.
perf_events,strace,ebpf programs) that requires more sufficient privileges. We need to extend functionality ofTest Modeto enableprivileged modefor Segment Store containers which will grant them operating system administrative capabilitiesImportance
This functionally will allow us to use Linux tracing tools without patching Pravega Operator and make profiling more simple.
Location
pkg/controller/pravega/pravega_segmentstore.goSuggestions for an improvement
Enable docker container
privileged modeinTest ModeThe text was updated successfully, but these errors were encountered: