minemeld in kubernetes cluster

[DineshPal]

Hey Guys,

I am trying to setup minemeld in Kubernetes cluster and path "/mnt/nfs_share/minemeld-local" and  "/mnt/nfs_share/minemeld-logs" on NFS server. Below are the yaml file.. I am getting "Operation not permitted" error

Can someone help ???

apiVersion: apps/v1
kind: Deployment
metadata:
  creationTimestamp: null
  labels:
    app: mm-pa1
  name: mm-pa1
spec:
  progressDeadlineSeconds: 2147483647
  replicas: 2
  revisionHistoryLimit: 2147483647
  selector:
    matchLabels:
      app: mm-pa1
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: mm-pa1
      name: mm-pa1
    spec:
      containers:
      - image: paloaltonetworks/minemeld
        imagePullPolicy: Always
        name: mm-pa1
        ports:
        - containerPort: 443
          protocol: TCP
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /opt/minemeld/local
          name: minemeld-local
        - mountPath: /opt/minemeld/log
          name: minemeld-logs
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      terminationGracePeriodSeconds: 30
      volumes:
      - name: minemeld-local
        nfs:
          path: /mnt/nfs_share/minemeld-local
          server: 192.168.*.*
      - name: minemeld-logs
        nfs:
          path: /mnt/nfs_share/minemeld-logs
          server: 192.168.*.*

 Error 

chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 397s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 398s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 399s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 400s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 401s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 1s, normally up, want up
run: collectd: (pid 17) 402s
Copying constraints
chown: changing ownership of '/opt/minemeld/local/library/constraints.txt': Operation not permitted
chown: changing ownership of '/opt/minemeld/local/redis': Operation not permitted
minemeld: checking if dependencies are running...
down: redis: 0s, normally up, want up
run: collectd: (pid 17) 403s

root@mm-pa1-5bb588b84-b5zgq:/opt/minemeld# ls -l
total 24
drwxr-xr-x 3 minemeld minemeld 4096 Jun 15 15:14 engine
drwxrwxrwx 9 1001 1001 4096 Aug 4 16:43 local
drwxrwxrwx 2 1001 1001 4096 Aug 4 16:43 log
drwxr-xr-x 3 minemeld minemeld 4096 Jun 15 15:14 prototypes
drwxr-xr-x 3 minemeld minemeld 4096 Jun 15 15:14 supervisor
drwxr-xr-x 3 minemeld minemeld 4096 Jun 15 15:14 www
root@mm-pa1-5bb588b84-b5zgq:/opt/minemeld# cat /etc/passwd