Lola Delannoy

> This looks interesting, and aligns well with my own thoughts, at least when it comes to the root daemon. Starting it as a service also brings the advantage that...

> > * telepresence root daemon does not work without the XDG_* envvar > > It should (that's why we pass the logdir and config dir as arguments). What problem...

A note I'd like to share, someone in my team will likely do something similar for launchd (macos)

Here it is: ``` ~ # cat /opt/bin/calicoctl.sh #!/bin/bash DATASTORE_TYPE=kubernetes \ KUBECONFIG=/etc/cni/net.d/calico-kubeconfig \ /opt/bin/calicoctl --allow-version-mismatch "$@" ``` The debug logs: ``` ~ # /opt/bin/calicoctl --log-level=debug label node my_node calico-group-id=rr1 --overwrite...

Here the file (minus the token/certificate): ``` # Kubeconfig file for Calico CNI plugin. Installed by calico/node. apiVersion: v1 kind: Config clusters: - name: local cluster: server: https://10.240.0.1:443 (aka kubernetes.default)...

Sorry for the delay, here the calico-node we use : [calico-node.txt](https://github.com/kubernetes-sigs/kubespray/files/14493251/calico-node.txt) We do not use etcd mode

The file `/etc/cni/net.d/calico-kubeconfig` exists without those modifications The unmodified clusterrole is similar to the [one](https://github.com/kubernetes-sigs/kubespray/blob/v2.24.1/roles/network_plugin/calico/templates/calico-cr.yml.j2) in kubespray 2.24.1 ```yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: calico-cni-plugin rules: - verbs: -...

Was fixed in https://github.com/kubernetes-sigs/kubespray/issues/11076

> @spnngl Thank you, can you please check [CLA](https://api.easycla.lfx.linuxfoundation.org/v2/repository-provider/github/sign/20677499/43613404/10841/#/?version=2) ? I just checked the CLA > Also do you have any issue created to explain a bit more the root...

> > **Which issue(s) this PR fixes**: > > Fixes # > > Can you edit the PR description and link to the issue here please ? It helps with...