Bug 2132074

Summary:	MTC Operator pods not coming up on OCP 4.12
Product:	Migration Toolkit for Containers	Reporter:	ssingla
Component:	Operator	Assignee:	Jason Montleon <jmontleo>
Status:	CLOSED ERRATA	QA Contact:	ssingla
Severity:	urgent	Docs Contact:	Anjana Suparna Sriram <asriram>
Priority:	unspecified
Version:	1.7.5	CC:	jmatthew, jmontleo, rjohnson
Target Milestone:	---
Target Release:	1.7.5
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-10-31 11:10:35 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description ssingla 2022-10-04 14:55:02 UTC

Description of problem: On installing MTC 1.7.5 on OCP 4.12, the migration operator pods are not spinning up due to PSA changes in OCP 4.12.


Version-Release number of selected component (if applicable):
OCP 4.12
MTC 1.7.5

How reproducible:
Always

Steps to Reproduce:

Install MTC 1.7.5 on OCP 4.12 cluster


Actual results:
ReplicaSet  failed to create pods with below error:

 ReplicaFailure   True    FailedCreate
Events:
  Type     Reason        Age                            From                   Message
  ----     ------        ----                           ----                   -------
  Warning  FailedCreate  <invalid>                      replicaset-controller  Error creating: pods "migration-operator-68bf58c696-fj84p" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "operator" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "operator" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "operator" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")



Expected results:

MTC should be successfully installed on OCP 4.12

Additional info:

Comment 1 Jason Montleon 2022-10-04 16:37:39 UTC

I think we will fix this with https://github.com/migtools/mig-operator/pull/852

Please test when able and let me know if it doesn't work so we can further investigate.

Comment 16 errata-xmlrpc 2022-10-31 11:10:35 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Migration Toolkit for Containers (MTC) 1.7.5 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7262