COMAC-193 Load nf_conntrack_proto_sctp module for comac CU
Change-Id: I462e104e025e9474328afb30e71ffba1d6b16edd
diff --git a/comac-cu/templates/statefulset-accelleran.yaml b/comac-cu/templates/statefulset-accelleran.yaml
index f0a88f0..71f22dd 100644
--- a/comac-cu/templates/statefulset-accelleran.yaml
+++ b/comac-cu/templates/statefulset-accelleran.yaml
@@ -31,17 +31,23 @@
labels:
app: {{ .Values.cu.name }}
spec:
+ terminationGracePeriodSeconds: 1
initContainers:
- - name: init-iptables
+ - name: cu-init
image: {{ .Values.cu.accelleran.images.init }}
+ securityContext:
+ privileged: true
+ runAsUser: 0
command: [ "sh", "-c"]
args:
- - iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP;
- securityContext:
- capabilities:
- add:
- - NET_ADMIN
- terminationGracePeriodSeconds: 1
+ - >
+ iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP;
+ if chroot /mnt/host-rootfs modinfo nf_conntrack_proto_sctp > /dev/null 2>&1; then \
+ chroot /mnt/host-rootfs modprobe nf_conntrack_proto_sctp; \
+ fi; \
+ volumeMounts:
+ - name: host-rootfs
+ mountPath: /mnt/host-rootfs
containers:
- name: nats
image: {{ .Values.cu.accelleran.images.nats }}
@@ -127,3 +133,6 @@
items:
- key: bootstrap.txt
path: bootstrap.txt
+ - name: host-rootfs
+ hostPath:
+ path: /