feat: Replace hostPath volumes with ephemeral volumes

wandb · Feb 11, 2025 · 8fc91c5 · 8fc91c5
1 parent a57e957
commit 8fc91c5
Showing 1 changed file with 10 additions and 19 deletions.
diff --git a/charts/operator-wandb/charts/otel/charts/agent/templates/deamonset.yaml b/charts/operator-wandb/charts/otel/charts/agent/templates/deamonset.yaml
@@ -36,6 +36,10 @@ spec:
         {{- end }}
     spec:
       serviceAccountName: {{ include "otelAgent.serviceAccountName" . }}
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       {{- if .tolerations }}
       tolerations:
         {{- toYaml .tolerations | nindent 8 }}
@@ -54,19 +58,15 @@ spec:
             - name: otlp
               containerPort: 4317
               protocol: TCP
-              hostPort: 4317
             - name: otlp-http
               containerPort: 4318
               protocol: TCP
-              hostPort: 4318
             - name: prometheus
               containerPort: 9109
               protocol: TCP
-              hostPort: 9109
             - name: statsd
               containerPort: 8125
               protocol: TCP
-              hostPort: 8125
           env:
             - name: MYSQL_PORT
               value: "{{ include "wandb.mysql.port" . }}"
@@ -108,28 +108,19 @@ spec:
             - name: varlogpods
               mountPath: /var/log/pods
               readOnly: true
-            - name: varlibdockercontainers
-              mountPath: /var/lib/docker/containers
+            - name: varlibcontainers
+              mountPath: /var/lib/containers
               readOnly: true
-            - name: hostfs
-              mountPath: /hostfs
-              readOnly: true
-              mountPropagation: HostToContainer
       volumes:
-        - name: hostfs
-          hostPath:
-            path: /
-        - name: varlogpods
-          hostPath:
-            path: /var/log/pods
         - name: config
           configMap:
             name: {{ include "otelAgent.fullname" . }}
             items:
               - key: config
                 path: config.yaml
-        - name: varlibdockercontainers
-          hostPath:
-            path: /var/lib/docker/containers
+        - name: varlogpods
+          emptyDir: {}
+        - name: varlibcontainers
+          emptyDir: {}
       hostNetwork: false
 {{- end }}