Created attachment 1646923 [details]
win webserver pod description

Description of problem: I am deploying a windows node as part of nightly 4.3 release.  In my test I am trying to run a test workload and it is not working properly.


Version-Release number of selected component (if applicable):
4.3.0-0.nightly-2019-12-19-050538

How reproducible:
Every time I try to deploy the workload

Steps to Reproduce:
Follow this guide:
https://docs.google.com/document/d/1kjcHg-tqJ4uqkCjNC5cbeIosi64J8WWf_iMPpwJ1PI4/edit#

The test container yaml can be found here:
https://gist.githubusercontent.com/suhanime/683ee7b5a2f55c11e3a26a4223170582/raw/c7552991bb5482c2dff011aaef9f013a58f9fe4c/WinWebServer.yaml

Actual results:
I was deploying in AWS using 4.3 nightly IPI.  The exact version of the nightly is 4.3.0-0.nightly-2019-12-19-050538

I was able to get the install and setup completed, but when testing the workload outlined in the doc I had the following error:
Failed create pod sandbox: rpc error: code = Unknown desc = failed to start sandbox container for pod "win-webserver-79b64df8b9-fwlbh": Error response from daemon: security option not supported: label

I also tried Glenn West’s winpacman example, and the pod runs fine, but it seems like the route is not functioning quite right for me:
https://github.com/glennswest/winpacman

Attached are a couple screenshots of both the Windows node with powershell up and my OpenShift project with the events from my deployment.

Expected results:
Pod should deploy and get created successfully and the service should make this available via LB.  The second test with Winpacman should expose a route that should be available to a browser but it is not accessable.

Additional info:
I am attaching the pod description and the service description for the test workload. And the pod, service, and route descriptions for the winpacman test.