Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1431907

Summary:	Jenkins container with persistent storage is unable to execute scripts generated by Jenkins as part of pipeline definition
Product:	OpenShift Container Platform	Reporter:	Miheer Salunke <misalunk>
Component:	Storage	Assignee:	Michael Adam <madam>
Status:	CLOSED DUPLICATE	QA Contact:	Jianwei Hou <jhou>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	3.4.0	CC:	aos-bugs, bchilds, bparees, eboyd, eparis, fkrska, hchen, hchiramm, lvrabec, madam, mgrepl, misalunk, mrobson, pprakash, rcyriac, sellis, vigoyal, vwalek
Target Milestone:	---	Keywords:	UpcomingRelease
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-05-01 14:59:48 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Comment 31 Miheer Salunke 2017-04-19 06:37:19 UTC

Hi Eric,

Can you come on a remote session with the customer ? If yes then what are your available timings? Please Note- The customer is in New Zealand so if you are OK then I will arrange it accordingly. Also can you specify your time zone if you are OK to come on a remote session ?

Thanks and regards,
Miheer

Comment 33 Erin Boyd 2017-04-19 23:39:38 UTC

HI All...
Sorry just getting caught up here.

A few quick things I noticed...the supplementalGroup setup in the SCC is set to MustRunAs, but you specify a range, therefore this needs to be changed to:
MustRunAsRange. You could also just set the single value as done in the example referenced above.

Next, is setting the security context in the pod definition to allow priv containers;
spec:
  containers:
    - name: gluster-nginx-priv
      image: fedora/nginx
      volumeMounts:
        - mountPath: /mnt/gluster 
          name: gluster-volume-claim
      securityContext:
        privileged: true

This is all listed in this example:
https://docs.openshift.org/latest/install_config/storage_examples/privileged_pod_storage.html

Lastly, I noticed this in the setup:
runAsUser:
  type: MustRunAsRange

You are running I believe as user 0 (root), thus try changing this to 
runAsUser:
  type: RunAsAny


I am happy to help debug this issue or if you can provide recreation instructions, I can do it on my local VMs.

Hope this helps!

Comment 58 Eric Paris 2017-05-01 14:57:44 UTC

*** Bug 1446156 has been marked as a duplicate of this bug. ***

Comment 59 Eric Paris 2017-05-01 14:59:48 UTC


*** This bug has been marked as a duplicate of bug 1445226 ***

Comment 60 Red Hat Bugzilla 2023-09-14 03:55:09 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days