Openshift : /bin/sh: can't create /etc/redis_password: Permission denied

[hufon]

Since this commit 92111c7

We couldn't deploy redis operator on openshift.
/etc is readonly on openshift, and we don't use REDIS_PASSWORD.

[hufon]

Maye be adding a password != nil when adding the poststart hook

[hufon]

/etc/redis_password should be moved in a ephemeral volume.

[bsergean]

Hey @hufon I'd like to try this operator but we use OpenShift 3.11. Which version of OpenShift are you guys using ?

[hufon]

We use okd/openshift 3.11

[bsergean]

Thanks, it's good for us as we are using the same version, and I thought that this operator wasn't supported.

[bsergean]

@hufon are you currently using the password protection and are blocked because of this, or is 'everything broken', even in password-less mode after 92111c7 ?

[bsergean]

I have setup minishift locally and I am also running into this problem. oc get events show

Could /tmp/ be used instead of /etc for temp files ?

NAME                                       READY   STATUS              RESTARTS   AGE
drc-example-distributedrediscluster-1-0    0/1     PostStartHookError: command '/bin/sh -c echo ${REDIS_PASSWORD} > /etc/redis_password' exited with 1: /bin/sh: can't create /etc/redis_password: Permission denied
                                           0       6h8m
drc-example-distributedrediscluster-0-0    0/1     PostStartHookError: command '/bin/sh -c echo ${REDIS_PASSWORD} > /etc/redis_password' exited with 1: /bin/sh: can't create /etc/redis_password: Permission denied
                                           0       6h8m
drc-example-distributedrediscluster-2-0    0/1     PostStartHookError: command '/bin/sh -c echo ${REDIS_PASSWORD} > /etc/redis_password' exited with 1: /bin/sh: can't create /etc/redis_password: Permission denied
                                           0       6h8m
^C%                                                                                                       

[bsergean]

Or maybe /var, or /data (alongside /data/nodes.conf) ?

[bsergean]

I've forked the repo, used /data instead of /etc, rebuilt the operator and pushed it to our own internal docker registry and that works.

bsergean@dd55c2c

Putting the password in /data isn't the right solution, but that's a workaround for now if anyone needs one.