From 77b8ed3b4eb6ee5cfd410a852a868e03db50fd87 Mon Sep 17 00:00:00 2001 From: David Zhu Date: Tue, 26 Nov 2019 16:47:00 -0800 Subject: [PATCH] Enable hostNetwork for workload identity --- deploy/kubernetes/base/controller.yaml | 5 +++++ deploy/kubernetes/base/node.yaml | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/deploy/kubernetes/base/controller.yaml b/deploy/kubernetes/base/controller.yaml index 2b9c92361..8f80c3880 100644 --- a/deploy/kubernetes/base/controller.yaml +++ b/deploy/kubernetes/base/controller.yaml @@ -13,6 +13,11 @@ spec: labels: app: gcp-compute-persistent-disk-csi-driver spec: + # Host network must be used for interaction with Workload Identity in GKE + # since it replaces GCE Metadata Server with GKE Metadata Server. Remove + # this requirement when issue is resolved and before any exposure of + # metrics ports + hostNetwork: true serviceAccountName: csi-gce-pd-controller-sa priorityClassName: csi-gce-pd-controller containers: diff --git a/deploy/kubernetes/base/node.yaml b/deploy/kubernetes/base/node.yaml index 005bc71d9..fb9727843 100644 --- a/deploy/kubernetes/base/node.yaml +++ b/deploy/kubernetes/base/node.yaml @@ -12,6 +12,11 @@ spec: labels: app: gcp-compute-persistent-disk-csi-driver spec: + # Host network must be used for interaction with Workload Identity in GKE + # since it replaces GCE Metadata Server with GKE Metadata Server. Remove + # this requirement when issue is resolved and before any exposure of + # metrics ports. + hostNetwork: true priorityClassName: csi-gce-pd-node serviceAccountName: csi-gce-pd-node-sa containers: