Bug 2079965

Summary: [rebase v1.24] [sig-node] PodOSRejection [NodeConformance] Kubelet should reject pod when the node OS doesn't match pod's OS [Suite:openshift/conformance/parallel] [Suite:k8s]
Product: OpenShift Container Platform Reporter: Abu Kashem <akashem>
Component: NodeAssignee: Ryan Phillips <rphillips>
Node sub component: Kubelet QA Contact: MinLi <minmli>
Status: CLOSED ERRATA Docs Contact:
Severity: high    
Priority: unspecified CC: aos-bugs, weinliu
Version: 4.11   
Target Milestone: ---   
Target Release: 4.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-10 11:09:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Abu Kashem 2022-04-28 15:59:05 UTC 
Rebase PR: https://github.com/openshift/kubernetes/pull/1248


Run #2: Failed expand_less	4s
{ Failure test/e2e/common/node/pod_admission.go:38
Apr 28 05:24:56.250: Error creating Pod
Unexpected error:
    <*errors.StatusError | 0xc001c34fa0>: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {
                SelfLink: "",
                ResourceVersion: "",
                Continue: "",
                RemainingItemCount: nil,
            },
            Status: "Failure",
            Message: "Pod \"wrong-pod-os\" is invalid: [spec.securityContext.seLinuxOptions: Forbidden: cannot be set for a windows pod, spec.containers[0].securityContext.capabilities: Forbidden: cannot be set for a windows pod]",
            Reason: "Invalid",
            Details: {
                Name: "wrong-pod-os",
                Group: "",
                Kind: "Pod",
                UID: "",
                Causes: [
                    {
                        Type: "FieldValueForbidden",
                        Message: "Forbidden: cannot be set for a windows pod",
                        Field: "spec.securityContext.seLinuxOptions",
                    },
                    {
                        Type: "FieldValueForbidden",
                        Message: "Forbidden: cannot be set for a windows pod",
                        Field: "spec.containers[0].securityContext.capabilities",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 422,
        },
    }
    Pod "wrong-pod-os" is invalid: [spec.securityContext.seLinuxOptions: Forbidden: cannot be set for a windows pod, spec.containers[0].securityContext.capabilities: Forbidden: cannot be set for a windows pod]
occurred
test/e2e/framework/pods.go:99}


https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_kubernetes/1248/pull-ci-openshift-kubernetes-master-k8s-e2e-gcp/1519525511389253632
Comment 2 MinLi 2022-05-23 05:05:47 UTC 
I don't find similar error from https://search.ci.openshift.org/?search=cannot+be+set+for+a+windows+pod&maxAge=168h&context=1&type=junit&name=&excludeName=&maxMatches=5&maxBytes=20971520&groupBy=job in the last 7 days, set it verified.
Comment 5 errata-xmlrpc 2022-08-10 11:09:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069