-
Notifications
You must be signed in to change notification settings - Fork 3.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
airbyte-workers: add /tmp emptyDir volume to connector pods #10761
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @tbcdns
We are going to hold off on merging this first as we have some internal discussions to do. FYI @sherifnada |
@tbcdns, after discussing with @ChristopheDuong, we agree this is useful and we want to merge this in. let us run some test in the mean time before doing so. should merge this in the next couple of days. were you able to successfully run a destination-s3 sync using this deployment? |
Where are you seeing that destination-s3 uses a local file? Do you mean destination-snowflake? |
@davinchia , I faced it with destination-s3, using Parquet as data format. But, I can confirm that I was able to run a destination-s3 sync using this deployment. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@ChristopheDuong @davinchia Outside of this PR, should we be setting a maximum size limit for the tmp volume as part of the resource requirements? Maybe this is only worth doing in the future with ephemeral storage, but I am a bit worried about adding/encouraging support for disk space usage on nodes without limiting the size.
@tbcdns thanks! @jrhizor that's a good call. I'll create an issue so we don't forget. We can decide on this limit once @ChristopheDuong and the connector teams have decided on disk bugger limits. |
Issue created here: https://github.com/airbytehq/airbyte-internal-issues/issues/478 |
* Revert "Revert "add /tmp emptyDir volume to connector pods (#10761)" (#11053)" This reverts commit eea5156. * prettier * bump version of base-normalization to pick up /tmp -> /dbt-tmp change * change /dbt-tmp/dbt_modules to /dbt * Regenerate test output files * add to changelog Co-authored-by: Christophe Duong <christophe.duong@gmail.com> Co-authored-by: Edward Gao <edward.gao@airbyte.io>
What
Some connectors (such as
destination-s3
) require to write some temporary data (generally to/tmp
).It is a good security practice to enforce read only root filesystem on Kubernetes pod, and, some productive Kubernetes clusters enforce that all pods run with read only root filesystem.
Therefore, in order to still allow connectors to write temporary data to
/tmp
with read only root fs, we must mount anemptyDir
volume to/tmp
.The original PR was here: #9874 we decided to split it into 3 different PRs.
How
Simply creating a new
emptyDir
volume and mount it under/tmp
.🚨 User Impact 🚨
No user impact