Bug 1842442
| Summary: | openshift authentication operator is in a crashbackoffloop | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | OpenShift BugZilla Robot <openshift-bugzilla-robot> | |
| Component: | apiserver-auth | Assignee: | Standa Laznicka <slaznick> | |
| Status: | CLOSED ERRATA | QA Contact: | pmali | |
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | 4.3.0 | CC: | aos-bugs, ingvarr.zhmakin, mfojtik, scheng, slaznick, sttts, xxia | |
| Target Milestone: | --- | |||
| Target Release: | 4.4.z | |||
| Hardware: | All | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | Bug Fix | ||
| Doc Text: |
Cause:
The deployment of the authentication operator and its payload did not specify they need writable root filesystem
Consequence:
When an SCC matching the deployments' other needs with a higher-priority than the 'privileged' SCC was created it would be used to default the security context of the deployed containers. If it did not allow writable root systems, it would prevent the containers from running.
Fix:
Specify that the containers in question need writable root filesystem.
Result:
authentication operator and its payload containers can run even if the conditions in "Cause" apply
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1842465 (view as bug list) | Environment: | ||
| Last Closed: | 2020-06-17 22:26:40 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1824800 | |||
| Bug Blocks: | 1842465 | |||
|
Comment 4
Standa Laznicka
2020-06-05 07:19:33 UTC
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2445 |