diff --git a/helm/nodesets/templates/nodeset.yaml b/helm/nodesets/templates/nodeset.yaml index b5d34d7a3..76748d8a0 100644 --- a/helm/nodesets/templates/nodeset.yaml +++ b/helm/nodesets/templates/nodeset.yaml @@ -134,6 +134,9 @@ spec: security: limitsConfig: {{ get (.security | default dict) "limitsConfig" | quote }} appArmorProfile: {{ get (.security | default dict) "appArmorProfile" | default "unconfined" | quote }} + {{- with (get (.security | default dict) "procMount") }} + procMount: {{ . | quote }} + {{- end }} {{- end }} {{- with (required ".Values.nodesets[*].munge is required." .munge) }} @@ -170,6 +173,9 @@ spec: security: limitsConfig: {{ get (.security | default dict) "limitsConfig" | quote }} appArmorProfile: {{ get (.security | default dict) "appArmorProfile" | default "unconfined" | quote }} + {{- with (get (.security | default dict) "procMount") }} + procMount: {{ . | quote }} + {{- end }} {{- end }} {{- $sssd := (.sssd | default dict) }} diff --git a/helm/nodesets/values.yaml b/helm/nodesets/values.yaml index b43e1e061..dc4f7c49c 100644 --- a/helm/nodesets/values.yaml +++ b/helm/nodesets/values.yaml @@ -171,6 +171,9 @@ nodesets: # Optional, defaults to empty string # e.g. `* soft nofile 1024` limitsConfig: "" + # Proc mount type for the slurmd container + # Optional, valid values: "Default", "Unmasked" + # procMount: "Default" # Munge configuration munge: # Each particular NodeSet's containers can have images other than default ones