All Apps and Add-ons

config-map kubernetes mount


Hello team,
I am running splunk in our kubernetes cluster and until now I was configuring only via the api and it works great.

I currently would like to change the email settings and not to do it via the api but by mounting a config-map and creating alert_actions.conf under /opt/splunk/etc/system/local

But the pod will keep crashing:
chown: changing ownership of ‘/opt/splunk/etc/system/local/’: Read-only file system

Any ideas about it please?

Splunk Employee
Splunk Employee

i suggest you check out our docker images (which use ansible for orchestration playbooks) and kubernetes operator! They contain app logic to allow you to upload splunk config via apps, rather than configmaps, which can get sketchy with permissions.

- MattyMo
0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...