Description of problem: Kuryr is missing permissions to use SCC's, making it unable to annotate pods running under normal admission control (i.e. in namespaces without `openshift.io/run-level` annotation). Annotating pods is essential for Kuryr to work. Version-Release number of selected component (if applicable): 4.2 How reproducible: Always Steps to Reproduce: 1. Install OCP 4.2 on OpenStack with Kuryr 2. Create a regular namespace 3. Create pod in that namespace Actual results: Pod hangs in ContainerCreating state Expected results: Pod gets into Running state. Additional info:
4.2.0-0.nightly-2019-10-02-122541
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2922