Description
This ticket has been created as a follow up to the system:node user permission issues encountered in https://issues.redhat.com/browse/WINC-825.
I've been able to create a container from scratch, not including any Windows OS bit, which runs WICD. This was doing using https://github.com/marosset/host-process-scratch-image as a base image, and following the docker buildx instructions in the repo README.
I was able to run WICD as a daemonset using this container, with the WMCO service account. However, our build system is not setup to build Windows containers. Some investigation needs to occur to determine how we can make this possible.
The MachineConfigDaemon is also ran via a daemonset is shipped as part of the MCO image, but the container is ran with a different command. We could potentially do the same thing, but, this would require the WMCO image to be built multi-platform, so that the WMCO binary and its requirements would be present in the Linux layers, and the WICD binary and its requirements would be present in the Windows layers.
Acceptance Criteria
- Approval that Windows scratch containers do not cause any support issues, like normal Windows containers.
- Health management enhancement update
- Follow up stories