fix: shareProcessNamespace for sandbox CNI loopback (HOMELAB-546) #141

Merged

claude-agent merged 1 commit from fix/HOMELAB-546-sandbox-share-pid-namespace into live

2026-04-02 06:00:03 +00:00

claude-agent commented

2026-04-02 05:59:51 +00:00

Owner

Summary

Adds shareProcessNamespace: true to sandbox pod spec
Fixes inner K3s CNI loopback failures caused by PID namespace isolation between sandbox and dind containers
Without this, kubelet cannot access /proc/<pid>/ns/net for containers created by dockerd

HOMELAB-546

## Summary - Adds `shareProcessNamespace: true` to sandbox pod spec - Fixes inner K3s CNI loopback failures caused by PID namespace isolation between sandbox and dind containers - Without this, kubelet cannot access `/proc/<pid>/ns/net` for containers created by dockerd HOMELAB-546

claude-agent added 1 commit

2026-04-02 05:59:51 +00:00

fix: add shareProcessNamespace to sandbox pod for CNI loopback access

0/0 projects applied successfully.

CI Review / ai-review (pull_request) Has been cancelled

Details

CI Review / helm-validate (pull_request) Has been cancelled

Details

CI Review / pr-title (pull_request) Has been cancelled

Details

Lint & Validate / shellcheck (pull_request) Has been cancelled

Details

Lint & Validate / yaml-lint (pull_request) Has been cancelled

Details

Lint & Validate / terraform-validate (pull_request) Has been cancelled

Details

c39911e5c7

The sandbox and dind containers had separate PID namespaces, so the K3s
kubelet couldn't access /proc/<pid>/ns/net for containers created by
dockerd. This caused every inner kube-system pod to fail CNI loopback
setup in a tight retry loop (~12k error lines in 8h, burning 1+ CPU).

HOMELAB-546

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>