Skip to content

Add ability to satisfy Kubernetes STIG requirement that worker nodes need to disable 'staticPodPath' kubelet option #13281

@neilamoore

Description

@neilamoore

What would you like to be added

The ability to disable the 'staticPodPath' configuration option on worker node kubelets to satisfy the Kubernetes STIG requirement.

Why is this needed

Prior efforts to allow this configurability was initially added via 082507c in v2.29.0 but was reverted in v2.31.0 with 34f43d2.

The revert is problematic because the recommended implementation (#12433 (comment)) doesn't work. kube_manifest_dir is used in roles\kubernetes\preinstall\tasks\0050-create_directories.yml and setting it to "" breaks the tasks using that variable.

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new feature.triage/acceptedIndicates an issue or PR is ready to be actively worked on.

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions