Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[nats helm] always use emptyDir for pidfile volume #782

Merged
merged 2 commits into from
Aug 17, 2023

Conversation

caleblloyd
Copy link
Contributor

Fixes #759

Always use an emptyDir for the pidfile volume. Many users run NATS as unprivileged. Unprivileged users can't write to /var/run. Making an emptyDir volume will use fsGroup from the security context and let the unprivileged user write the pidfile

Caleb Lloyd added 2 commits August 17, 2023 09:13
Signed-off-by: Caleb Lloyd <caleb@synadia.com>
Signed-off-by: Caleb Lloyd <caleb@synadia.com>
@caleblloyd caleblloyd merged commit 380c183 into main Aug 17, 2023
5 checks passed
@caleblloyd caleblloyd deleted the pidfile-always-emptydir branch August 17, 2023 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[nats helm 1.x] nats-server pid location changes based on configuration
3 participants