<p dir="auto">When I try to create a pod which mounts secret volumes I get a <code class="notranslate">Unable to mount volumes for pod: exit status 1</code> error. For instance, when trying to create the example pod from <a href="https://github.com/kubernetes/kubernetes/tree/master/docs/user-guide/secrets">https://github.com/kubernetes/kubernetes/tree/master/docs/user-guide/secrets</a> :</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="$ curl -s https://raw.githubusercontent.com/kubernetes/kubernetes/master/docs/user-guide/secrets/secret.yaml | kubectl create -f -
secrets/test-secret
$ curl -s https://raw.githubusercontent.com/kubernetes/kubernetes/master/docs/user-guide/secrets/secret-pod.yaml | kubectl create -f -
pods/secret-test-pod
$ kubectl describe pod secret-test-pod
[...]
Events:
  FirstSeen             LastSeen            Count   From            SubobjectPath   Reason      Message
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 10:56:30 +0000 1   {scheduler }                scheduled   Successfully assigned secret-test-pod to 127.0.0.1
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 11:31:37 +0000 211 {kubelet 127.0.0.1}         failedMount Unable to mount volumes for pod &quot;secret-test-pod_default&quot;: exit status 1
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 11:31:37 +0000 211 {kubelet 127.0.0.1}         failedSync  Error syncing pod, skipping: exit status 1"><pre class="notranslate"><code class="notranslate">$ curl -s https://raw.githubusercontent.com/kubernetes/kubernetes/master/docs/user-guide/secrets/secret.yaml | kubectl create -f -
secrets/test-secret
$ curl -s https://raw.githubusercontent.com/kubernetes/kubernetes/master/docs/user-guide/secrets/secret-pod.yaml | kubectl create -f -
pods/secret-test-pod
$ kubectl describe pod secret-test-pod
[...]
Events:
  FirstSeen             LastSeen            Count   From            SubobjectPath   Reason      Message
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 10:56:30 +0000 1   {scheduler }                scheduled   Successfully assigned secret-test-pod to 127.0.0.1
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 11:31:37 +0000 211 {kubelet 127.0.0.1}         failedMount Unable to mount volumes for pod "secret-test-pod_default": exit status 1
  Fri, 30 Oct 2015 10:56:30 +0000   Fri, 30 Oct 2015 11:31:37 +0000 211 {kubelet 127.0.0.1}         failedSync  Error syncing pod, skipping: exit status 1
</code></pre></div>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="$ kubectl get secrets
NAME                  TYPE                                  DATA
default-token-vjaxy   kubernetes.io/service-account-token   2
test-secret           Opaque                                2"><pre class="notranslate"><code class="notranslate">$ kubectl get secrets
NAME                  TYPE                                  DATA
default-token-vjaxy   kubernetes.io/service-account-token   2
test-secret           Opaque                                2
</code></pre></div>
<p dir="auto">This is a single node containerized k8s cluster for local development (based on <a href="https://github.com/kubernetes/kubernetes/blob/master/docs/getting-started-guides/docker.md">https://github.com/kubernetes/kubernetes/blob/master/docs/getting-started-guides/docker.md</a> ).</p>
<p dir="auto">Here is how I specifically create the cluster and the definition of the master pod: <a href="https://gist.github.com/2opremio/12eafc0c2485d8d13f2a">https://gist.github.com/2opremio/12eafc0c2485d8d13f2a</a></p>
<p dir="auto">I am running Docker <code class="notranslate">version 1.8.2, build 0a8c2e3</code></p>
<p dir="auto">Related to <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="112676337" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/16055" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/16055/hovercard" href="https://github.com/kubernetes/kubernetes/issues/16055">#16055</a> (I get a different error, though) and <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="79865554" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/8734" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/8734/hovercard" href="https://github.com/kubernetes/kubernetes/issues/8734">#8734</a> (but I do provide the --contenerized flag see <a href="https://gist.github.com/2opremio/12eafc0c2485d8d13f2a#file-create_cluster-sh-L27">https://gist.github.com/2opremio/12eafc0c2485d8d13f2a#file-create_cluster-sh-L27</a> ) and and somehow similar to <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="87107241" data-permission-text="Title is private" data-url="https://github.com/openshift/origin/issues/3072" data-hovercard-type="issue" data-hovercard-url="/openshift/origin/issues/3072/hovercard" href="https://github.com/openshift/origin/issues/3072">openshift/origin#3072</a></p>
<p dir="auto">Resurrected from <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="35537132" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/66" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/66/hovercard" href="https://github.com/kubernetes/kubernetes/issues/66">#66</a> and <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="39410196" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/761" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/761/hovercard" href="https://github.com/kubernetes/kubernetes/issues/761">#761</a>.</p>
<p dir="auto">Probe currently supports the following control parameters:</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="    // Length of time before health checking is activated.  In seconds.
    InitialDelaySeconds int64 `json:&quot;initialDelaySeconds,omitempty&quot; description:&quot;number of seconds after the container has started before liveness probes are initiated; see http://releases.k8s.io/HEAD/docs/user-guide/pod-states.md#container-probes&quot;`
    // Length of time before health checking times out.  In seconds.
    TimeoutSeconds int64 `json:&quot;timeoutSeconds,omitempty&quot; description:&quot;number of seconds after which liveness probes timeout; defaults to 1 second; see http://releases.k8s.io/HEAD/docs/user-guide/pod-states.md#container-probes&quot;`"><pre class="notranslate"><code class="notranslate">    // Length of time before health checking is activated.  In seconds.
    InitialDelaySeconds int64 `json:"initialDelaySeconds,omitempty" description:"number of seconds after the container has started before liveness probes are initiated; see http://releases.k8s.io/HEAD/docs/user-guide/pod-states.md#container-probes"`
    // Length of time before health checking times out.  In seconds.
    TimeoutSeconds int64 `json:"timeoutSeconds,omitempty" description:"number of seconds after which liveness probes timeout; defaults to 1 second; see http://releases.k8s.io/HEAD/docs/user-guide/pod-states.md#container-probes"`
</code></pre></div>
<p dir="auto">We should add the following common control parameters (matching, for instance, <a href="https://cloud.google.com/appengine/docs/managed-vms/config#health_checking" rel="nofollow">AppEngine's parameters</a> and <a href="https://cloud.google.com/compute/docs/reference/latest/httpHealthChecks" rel="nofollow">GCE's parameters</a>):</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="// How often to probe
PeriodSeconds *int64
// Minimum consecutive successes for the probe to be considered successful after having reached the FailureThreshold; defaults to 1; must be 1 for liveness 
SuccessThreshold *int
// Minimum consecutive failures for the probe to be considered failed; defaults to 1
FailureThreshold *int"><pre class="notranslate"><code class="notranslate">// How often to probe
PeriodSeconds *int64
// Minimum consecutive successes for the probe to be considered successful after having reached the FailureThreshold; defaults to 1; must be 1 for liveness 
SuccessThreshold *int
// Minimum consecutive failures for the probe to be considered failed; defaults to 1
FailureThreshold *int
</code></pre></div>
<p dir="auto">At some point we'll probably want to add an enable/disable boolean, since it's convenient to be able to disable liveness probes without losing the parameter settings, but that's less critical than the above.</p>