Kubernetes Agent Blind to New Mounts? Demystifying Mount Propagation

How mountPropagation: HostToContainer leverages Linux namespaces to solve a common agent problem Ever run into this frustrating scenario? You deploy a Kubernetes agent (like an I/O limiter, monitoring tool, or operator) that needs to interact with PersistentVolumes mounted by Kubelet for other pods. It works fine initially, seeing all existing mounts. But then, a new pod gets scheduled, its PV gets mounted by Kubelet... and your agent is completely blind to it!

Apr 23, 2025 - 22:17
 0
Kubernetes Agent Blind to New Mounts? Demystifying Mount Propagation

mountpropagation

How mountPropagation: HostToContainer leverages Linux namespaces to solve a common agent problem

Ever run into this frustrating scenario? You deploy a Kubernetes agent (like an I/O limiter, monitoring tool, or operator) that needs to interact with PersistentVolumes mounted by Kubelet for other pods. It works fine initially, seeing all existing mounts. But then, a new pod gets scheduled, its PV gets mounted by Kubelet... and your agent is completely blind to it!