Merge pull request #940 from pohly/release-0.9-backport

Prepare v0.9.1

Author: avalluri

Dockerfile

@@ -5,7 +5,7 @@ ARG LINUX_BASE=debian:buster-slim
 FROM ${LINUX_BASE} AS build
 ARG APT_GET="env DEBIAN_FRONTEND=noninteractive apt-get"
 
-ARG GO_VERSION="1.15.2"
+ARG GO_VERSION="1.16.1"
 
 # CACHEBUST is set by the CI when building releases to ensure that apt-get really gets
 # run instead of just using some older, cached result.

Makefile

@@ -44,7 +44,7 @@ NO_PROXY=$(shell echo "$${NO_PROXY:-$${no_proxy}},$$(ip addr | grep inet6 | grep
 export HTTP_PROXY HTTPS_PROXY NO_PROXY
 
 REGISTRY_NAME?=$(shell . test/test-config.sh && echo $${TEST_BUILD_PMEM_REGISTRY})
-IMAGE_VERSION?=v0.9.0
+IMAGE_VERSION?=v0.9.1
 IMAGE_TAG=$(REGISTRY_NAME)/pmem-csi-driver$*:$(IMAGE_VERSION)
 # Pass proxy config via --build-arg only if these are set,
 # enabling proxy config other way, like ~/.docker/config.json

deploy/bindata_generated.go

@@ -12,6 +12,12 @@ spec:
       labels:
         app: my-csi-app
     spec:
+      # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+      # This security context causes permissions of volume mounts
+      # to be adapted accordingly, see
+      # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+      securityContext:
+        fsGroup: 1000
       # make sure that no two Pods run on same node
       affinity:
         podAntiAffinity:
@@ -24,7 +30,7 @@ spec:
             topologyKey: "kubernetes.io/hostname"
       containers:
       - name: my-frontend
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         command: [ "/bin/sh" ]
         args: [ "-c", "touch /data/$(POD_NAME); sleep 100000" ]
         env:

deploy/common/pmem-app-cache.yaml

@@ -5,9 +5,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-inline-volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

deploy/common/pmem-app-ephemeral.yaml

@@ -6,9 +6,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-inline-volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

deploy/common/pmem-app-generic-ephemeral.yaml

@@ -3,9 +3,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

deploy/common/pmem-app-late-binding.yaml

@@ -3,9 +3,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-1
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"
@@ -20,9 +26,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-2
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

deploy/common/pmem-app.yaml

@@ -5,13 +5,19 @@ metadata:
   labels:
     io.katacontainers.config.hypervisor.memory_offset: "2147483648" # 2Gi, must be at least as large as the PMEM volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   # see https://github.com/kata-containers/packaging/tree/1.11.0-rc0/kata-deploy#run-a-sample-workload
   runtimeClassName: kata-qemu
   nodeSelector:
     katacontainers.io/kata-runtime: "true"
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

deploy/common/pmem-kata-app-ephemeral.yaml

@@ -5,13 +5,19 @@ metadata:
   labels:
     io.katacontainers.config.hypervisor.memory_offset: "2147483648" # 2Gi, must be at least as large as the PMEM volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   # see https://github.com/kata-containers/packaging/tree/1.11.0-rc0/kata-deploy#run-a-sample-workload
   runtimeClassName: kata-qemu
   nodeSelector:
     katacontainers.io/kata-runtime: "true"
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"