Bug 1842442

Summary: openshift authentication operator is in a crashbackoffloop
Product: OpenShift Container Platform Reporter: OpenShift BugZilla Robot <openshift-bugzilla-robot>
Component: apiserver-authAssignee: Standa Laznicka <slaznick>
Status: CLOSED ERRATA QA Contact: pmali
Severity: high Docs Contact:
Priority: high    
Version: 4.3.0CC: aos-bugs, ingvarr.zhmakin, mfojtik, scheng, slaznick, sttts, xxia
Target Milestone: ---   
Target Release: 4.4.z   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: The deployment of the authentication operator and its payload did not specify they need writable root filesystem Consequence: When an SCC matching the deployments' other needs with a higher-priority than the 'privileged' SCC was created it would be used to default the security context of the deployed containers. If it did not allow writable root systems, it would prevent the containers from running. Fix: Specify that the containers in question need writable root filesystem. Result: authentication operator and its payload containers can run even if the conditions in "Cause" apply
Story Points: ---
Clone Of:
: 1842465 (view as bug list) Environment:
Last Closed: 2020-06-17 22:26:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1824800    
Bug Blocks: 1842465    

Comment 4 Standa Laznicka 2020-06-05 07:19:33 UTC
Nothing on dev side to be done, the PR merged yesterday.

Comment 8 errata-xmlrpc 2020-06-17 22:26:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.