Skip to content

Commit b494df1

Browse files
authored
Converting controller server statefulset to deployment (#134)
* Converting controller server statefulset to deployment * Ignore CVE * Addressing comments * Removing duplicate ignore CVEs
1 parent e98d15a commit b494df1

File tree

3 files changed

+14
-10
lines changed

3 files changed

+14
-10
lines changed

.nancy-ignore

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
CVE-2020-8561 ## CWE-610: Externally Controlled Reference to a Resource in Another Sphere
2-
CVE-2021-25740 ## CWE-610: Externally Controlled Reference to a Resource in Another Sphere
2+
CVE-2021-25740 ## CWE-610: Externally Controlled Reference to a Resource in Another Sphere
33
sonatype-2022-6522 ## 1 non-CVE vuln [pkg:golang/k8s.io/[email protected]]
44
CVE-2021-25749 ## Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.Fix not available in community till now.

deploy/kubernetes/driver/kubernetes/manifests/controller-server.yaml

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,27 @@
1-
kind: StatefulSet
1+
kind: Deployment
22
apiVersion: apps/v1
33
metadata:
44
name: ibm-vpc-block-csi-controller
55
namespace: kube-system
66
labels:
7-
app: ibm-vpc-block-csi-driver
7+
app: ibm-vpc-block-csi-controller
88
addonmanager.kubernetes.io/mode: Reconcile
9+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
910
spec:
10-
serviceName: "ibm-vpc-block-service"
1111
replicas: 1
1212
selector:
1313
matchLabels:
14-
app: ibm-vpc-block-csi-driver
14+
app: ibm-vpc-block-csi-controller
15+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
1516
template:
1617
metadata:
1718
annotations:
1819
prometheus.io/scrape: "true"
1920
prometheus.io/port: "9080"
2021
prometheus.io/path: "/metrics"
2122
labels:
22-
app: ibm-vpc-block-csi-driver
23+
app: ibm-vpc-block-csi-controller
24+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
2325
spec:
2426
priorityClassName: system-cluster-critical
2527
serviceAccountName: ibm-vpc-block-controller-sa
@@ -207,4 +209,3 @@ spec:
207209
- name: customer-auth
208210
secret:
209211
secretName: storage-secret-store
210-
volumeClaimTemplates: []

deploy/kubernetes/driver/kubernetes/manifests/node-server.yaml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,20 +4,23 @@ metadata:
44
name: ibm-vpc-block-csi-node
55
namespace: kube-system
66
labels:
7-
app: ibm-vpc-block-csi-driver
7+
app: ibm-vpc-block-csi-node
88
addonmanager.kubernetes.io/mode: Reconcile
9+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
910
spec:
1011
selector:
1112
matchLabels:
12-
app: ibm-vpc-block-csi-driver
13+
app: ibm-vpc-block-csi-node
14+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
1315
template:
1416
metadata:
1517
annotations:
1618
prometheus.io/scrape: "true"
1719
prometheus.io/port: "9080"
1820
prometheus.io/path: "/metrics"
1921
labels:
20-
app: ibm-vpc-block-csi-driver
22+
app: ibm-vpc-block-csi-node
23+
app.kubernetes.io/name: ibm-vpc-block-csi-driver
2124
spec:
2225
priorityClassName: system-node-critical
2326
serviceAccountName: ibm-vpc-block-node-sa

0 commit comments

Comments
 (0)