Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions helm/nodesets/templates/nodeset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -134,6 +134,9 @@ spec:
security:
limitsConfig: {{ get (.security | default dict) "limitsConfig" | quote }}
appArmorProfile: {{ get (.security | default dict) "appArmorProfile" | default "unconfined" | quote }}
{{- with (get (.security | default dict) "procMount") }}
procMount: {{ . | quote }}
{{- end }}
Comment on lines +137 to +139

Copilot AI Mar 25, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This adds spec.slurmd.security.procMount, but the NodeSet CRD also supports spec.munge.security.procMount (same enum). If the intent is full “procMount passthrough” for NodeSets, consider templating it for the munge container as well (and documenting it in values.yaml), otherwise it’s unclear why only slurmd is supported.

Copilot uses AI. Check for mistakes.
{{- end }}

{{- with (required ".Values.nodesets[*].munge is required." .munge) }}
Expand Down Expand Up @@ -170,6 +173,9 @@ spec:
security:
limitsConfig: {{ get (.security | default dict) "limitsConfig" | quote }}
appArmorProfile: {{ get (.security | default dict) "appArmorProfile" | default "unconfined" | quote }}
{{- with (get (.security | default dict) "procMount") }}
procMount: {{ . | quote }}
{{- end }}
{{- end }}

{{- $sssd := (.sssd | default dict) }}
Expand Down
3 changes: 3 additions & 0 deletions helm/nodesets/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -171,6 +171,9 @@ nodesets:
# Optional, defaults to empty string
# e.g. `* soft nofile 1024`
limitsConfig: ""
# Proc mount type for the slurmd container
# Optional, valid values: "Default", "Unmasked"
# procMount: "Default"
# Munge configuration
munge:
# Each particular NodeSet's containers can have images other than default ones
Expand Down
Loading