Skip to content

Add ability to satisfy Kubernetes STIG requirement that worker nodes need to disable 'staticPodPath' kubelet option #13281

Description

@neilamoore

What would you like to be added

The ability to disable the 'staticPodPath' configuration option on worker node kubelets to satisfy the Kubernetes STIG requirement.

Why is this needed

Prior efforts to allow this configurability was initially added via 082507c in v2.29.0 but was reverted in v2.31.0 with 34f43d2.

The revert is problematic because the recommended implementation (#12433 (comment)) doesn't work. kube_manifest_dir is used in roles\kubernetes\preinstall\tasks\0050-create_directories.yml and setting it to "" breaks the tasks using that variable.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new feature.triage/acceptedIndicates an issue or PR is ready to be actively worked on.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions