Allow mounting /opt/CrowdStrike directory on temporary folder

[miguelcvent]

We tried to use the node.advanced.autoUpdate feature, but when we upgraded the version from the interface, every pod went into an unstable state, where they was moved into Error and then into CrashLoopBackoff state.

We were able to fix such problem by removing the /opt/CrowdStrike directory from every node, but we are not sure if that problem is not going to happen again.

So, if there were an option to allow using /opt/CrowdStrike as an Ephemeral volume instead a Persistent one, it would be much safer. So we would like to use emptyDir instead of hostPath when defining the Volumes.

Which is the advantage of having such information stored in the host?

[gpontejos]

Hi! We need the directory to persist across reboots, pod restarts, and other events that may occur on the node so that the agent-id for the host remains the same. If not, then you would see many duplicates of that node in your host inventory.

For the pod CrashLoopBackoffs using autoUpdate, do you have the the Sensor update policies: Read scope attached to your API credentials?