Use --mount for better diags/error on failure.

fasaxc · fasaxc · commit 544ddeb2a4c8 · 2025-11-28T14:37:25.000Z
diff --git a/felix/fv/infrastructure/infra_k8s.go b/felix/fv/infrastructure/infra_k8s.go
@@ -667,7 +667,7 @@ func (kds *K8sDatastoreInfra) GetDockerArgs() []string {
 		"-e", "K8S_API_ENDPOINT=" + kds.Endpoint,
 		"-e", "KUBERNETES_MASTER=" + kds.Endpoint,
 		"-e", "K8S_INSECURE_SKIP_TLS_VERIFY=true",
-		"-v", kds.CertFileName + ":/tmp/apiserver.crt",
+		"--mount", fmt.Sprintf("type=bind,source=%s,target=%s", kds.CertFileName, "/tmp/apiserver.crt"),
 	}
 }
 
@@ -678,7 +678,7 @@ func (kds *K8sDatastoreInfra) GetBadEndpointDockerArgs() []string {
 		"-e", "TYPHA_DATASTORETYPE=kubernetes",
 		"-e", "K8S_API_ENDPOINT=" + kds.BadEndpoint,
 		"-e", "K8S_INSECURE_SKIP_TLS_VERIFY=true",
-		"-v", kds.CertFileName + ":/tmp/apiserver.crt",
+		"--mount", fmt.Sprintf("type=bind,source=%s,target=%s", kds.CertFileName, "/tmp/apiserver.crt"),
 	}
 }
 

Original file line number	Diff line number	Diff line change
`@@ -667,7 +667,7 @@ func (kds *K8sDatastoreInfra) GetDockerArgs() []string {`
`667`	`667`	`"-e", "K8S_API_ENDPOINT=" + kds.Endpoint,`
`668`	`668`	`"-e", "KUBERNETES_MASTER=" + kds.Endpoint,`
`669`	`669`	`"-e", "K8S_INSECURE_SKIP_TLS_VERIFY=true",`
`670`		`- "-v", kds.CertFileName + ":/tmp/apiserver.crt",`
	`670`	`+ "--mount", fmt.Sprintf("type=bind,source=%s,target=%s", kds.CertFileName, "/tmp/apiserver.crt"),`
`671`	`671`	`}`
`672`	`672`	`}`
`673`	`673`
`@@ -678,7 +678,7 @@ func (kds *K8sDatastoreInfra) GetBadEndpointDockerArgs() []string {`
`678`	`678`	`"-e", "TYPHA_DATASTORETYPE=kubernetes",`
`679`	`679`	`"-e", "K8S_API_ENDPOINT=" + kds.BadEndpoint,`
`680`	`680`	`"-e", "K8S_INSECURE_SKIP_TLS_VERIFY=true",`
`681`		`- "-v", kds.CertFileName + ":/tmp/apiserver.crt",`
	`681`	`+ "--mount", fmt.Sprintf("type=bind,source=%s,target=%s", kds.CertFileName, "/tmp/apiserver.crt"),`
`682`	`682`	`}`
`683`	`683`	`}`
`684`	`684`