Page MenuHomePhabricator

Create ValidatingAdmissionPolicy to permit hostPath mounts for mediawiki
Closed, ResolvedPublic

Description

Our current policies do not allow us to use hostPath, with a couple of exceptions. We need another policy where we will be able to mount /srv/mediawiki to the mw-expermental pod.

New policy will need to include /usr/share/GeoIP and /usr/share/GeoIPInfo as well, because it is what it is.

Event Timeline

Change #1146992 had a related patch set uploaded (by Effie Mouzeli; author: Effie Mouzeli):

[operations/deployment-charts@master] admin_ng: add ValidatingAdmissionPolicy to permit hostPath mounts for mediawiki

https://gerrit.wikimedia.org/r/1146992

jijiki changed the task status from Open to In Progress.May 27 2025, 12:47 PM
jijiki triaged this task as Medium priority.
jijiki updated the task description. (Show Details)

Change #1151208 had a related patch set uploaded (by Effie Mouzeli; author: Effie Mouzeli):

[operations/deployment-charts@master] admin_ng: add policy for /srv/mediawiki hostPath mounts

https://gerrit.wikimedia.org/r/1151208

Change #1151208 merged by jenkins-bot:

[operations/deployment-charts@master] admin_ng: add policy for /srv/mediawiki hostPath mounts #0

https://gerrit.wikimedia.org/r/1151208

Change #1146992 merged by jenkins-bot:

[operations/deployment-charts@master] validating-admission-policies: add policy to permit hostPath mounts for mediawiki #0

https://gerrit.wikimedia.org/r/1146992