Use PodResources mount as a path instead of file

[gjulianm]

What does this PR do?

This PR fixes the PodResources socket mount introduced in #1650. By using a file mount directly, if kubelet restarts and recreates the socket, the container will not see the new socket and will keep the reference to the old one, thus losing the connection.

Motivation

Fix a bug with kubelet restarts.

Additional Notes

Minimum Agent Versions

No changes w.r.t #1650

• Agent: v7.62
• Cluster Agent: vX.Y.Z

Describe your test plan

Unit tests should reflect the new change in mounts.

Checklist

• PR has at least one valid label: bug, enhancement, refactoring, documentation, tooling, and/or dependencies
• PR has a milestone or the qa/skip-qa label

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 49.66%. Comparing base (71004aa) to head (18e5f8a).
Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1674      +/-   ##
==========================================
+ Coverage   49.32%   49.66%   +0.34%     
==========================================
  Files         218      218              
  Lines       21171    21451     +280     
==========================================
+ Hits        10442    10654     +212     
- Misses      10184    10247      +63     
- Partials      545      550       +5     

Flag	Coverage Δ
unittests	49.66% <100.00%> (+0.34%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
...ller/datadogagent/defaults/datadogagent_default.go	91.45% <100.00%> (ø)
...nternal/controller/datadogagent/override/global.go	56.52% <100.00%> (ø)
pkg/testutils/builder.go	91.67% <100.00%> (ø)

... and 5 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 71004aa...18e5f8a. Read the comment docs.

[tbavelier]

Not a blocker: could we also envision a test to check a custom provided path (e.g. spec.global.podResourcesSocketPath= /foo/bar) ?

[tbavelier]

Suggested change

	podResourcesVol, podResourcesMount := volume.GetVolumes(v2alpha1.KubeletPodResourcesVolumeName, config.Kubelet.PodResourcesSocketDir, config.Kubelet.PodResourcesSocketDir, false)
	podResourcesVol, podResourcesMount := volume.GetVolumes(v2alpha1.KubeletPodResourcesVolumeName, config.Kubelet.PodResourcesSocketDir, config.Kubelet.PodResourcesSocketDir, true)

Could we use readOnly: true on this volume or that prevents from communicating with the socket ?

[gjulianm]

In my testing it prevented communication, yes.