Skip to content

encrypted volume breaks if initializer is restarted #2455

Description

@burgerdev

The LUKS mount created by the initializer is bound to the initializer's mount namespace. If the container gets deleted or fails, the mount namespace is deleted and the mount goes away, leaving the main container consuming the mount in a broken state. Even after restarting, the mount won't come back.

To reproduce:

  1. Create a pod using a secure PV (e.g. MySQL example from released yaml).
  2. Exec into the initializer and kill PID 1.
  3. Try to use the volume in the other container -> I/O error.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working as intended

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions