Back to bug 1942725

Who When What Removed Added
oarribas 2021-03-24 19:32:07 UTC Priority unspecified high
CC oarribas
Robert Bohne 2021-03-26 11:10:45 UTC CC rbohne
Angel Fortunato Acosta Bencomo 2021-03-29 10:26:01 UTC CC aacostab
Stefan Schimanski 2021-03-29 10:47:16 UTC Assignee sttts slaznick
John Call 2021-04-08 05:47:13 UTC CC jcall
Akash 2021-04-08 06:47:01 UTC CC amulmule
Angel Fortunato Acosta Bencomo 2021-04-08 06:56:59 UTC Link ID Red Hat Knowledge Base (Solution) 5911951
Phillip Kramp 2021-04-12 16:23:17 UTC CC pkramp
Stefan Schimanski 2021-04-14 12:50:56 UTC CC sttts
Standa Laznicka 2021-04-14 13:01:37 UTC Target Release --- 4.8.0
OpenShift BugZilla Robot 2021-04-14 13:01:57 UTC Status NEW POST
OpenShift BugZilla Robot 2021-04-14 13:01:59 UTC Link ID Github openshift/cluster-openshift-apiserver-operator/pull/437
OpenShift BugZilla Robot 2021-04-15 03:45:37 UTC Status POST MODIFIED
OpenShift Automated Release Tooling 2021-04-15 04:47:10 UTC Status MODIFIED ON_QA
Standa Laznicka 2021-04-15 11:45:47 UTC CC romain.pochard
Standa Laznicka 2021-04-30 09:21:35 UTC Doc Text Cause:
Custom SCCs may have higher priority than the ones in the default set, which may lead to these being matched to openshift-apiserver pods and break their ability to write in their root filesystem.

Consequence:
This might lead to an outage of some of the OpenShift APIs.

Fix:
Explicitly mention in the openshift-apiserver pods that the root filesystem should be writable.

Result:
Custom SCCs should not prevent openshift-apiserver pods from running.
Doc Type If docs needed, set a value Bug Fix
OpenShift BugZilla Robot 2021-04-30 09:23:14 UTC Blocks 1955502
OpenShift BugZilla Robot 2021-04-30 09:24:37 UTC Blocks 1955506
Standa Laznicka 2021-04-30 09:27:08 UTC Blocks 1955506
Neil Carpenter 2021-05-04 20:26:17 UTC CC neilcar
Xingxing Xia 2021-05-06 10:05:11 UTC Status ON_QA VERIFIED
Summary openshift-apiserver degraded after installing Stackrox in OCP 4.7 [SCC] openshift-apiserver degraded when creating new pod after installing Stackrox which creates a less privileged SCC [4.7]
Xingxing Xia 2021-05-06 10:24:33 UTC Summary [SCC] openshift-apiserver degraded when creating new pod after installing Stackrox which creates a less privileged SCC [4.7] [SCC] openshift-apiserver degraded when creating new pod after installing Stackrox which creates a less privileged SCC [4.8]
errata-xmlrpc 2021-07-27 00:17:39 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2021-07-27 22:55:28 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2021-07-27 22:55:28 UTC
errata-xmlrpc 2021-07-27 22:55:48 UTC Link ID Red Hat Product Errata RHSA-2021:2438

Back to bug 1942725