Bug 2079965 - [rebase v1.24] [sig-node] PodOSRejection [NodeConformance] Kubelet should reject pod when the node OS doesn't match pod's OS [Suite:openshift/conformance/parallel] [Suite:k8s]
Summary: [rebase v1.24] [sig-node] PodOSRejection [NodeConformance] Kubelet should re...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Node
Version: 4.11
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 4.11.0
Assignee: Ryan Phillips
QA Contact: MinLi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-28 15:59 UTC by Abu Kashem
Modified: 2022-08-10 11:09 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-10 11:09:21 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift apiserver-library-go pull 82 0 None open Bug 2079965: Ignore non-linux pods while applying SCCs 2022-05-02 13:05:12 UTC
Red Hat Product Errata RHSA-2022:5069 0 None None None 2022-08-10 11:09:32 UTC

Description Abu Kashem 2022-04-28 15:59:05 UTC 
Rebase PR: https://github.com/openshift/kubernetes/pull/1248


Run #2: Failed expand_less	4s
{ Failure test/e2e/common/node/pod_admission.go:38
Apr 28 05:24:56.250: Error creating Pod
Unexpected error:
    <*errors.StatusError | 0xc001c34fa0>: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {
                SelfLink: "",
                ResourceVersion: "",
                Continue: "",
                RemainingItemCount: nil,
            },
            Status: "Failure",
            Message: "Pod \"wrong-pod-os\" is invalid: [spec.securityContext.seLinuxOptions: Forbidden: cannot be set for a windows pod, spec.containers[0].securityContext.capabilities: Forbidden: cannot be set for a windows pod]",
            Reason: "Invalid",
            Details: {
                Name: "wrong-pod-os",
                Group: "",
                Kind: "Pod",
                UID: "",
                Causes: [
                    {
                        Type: "FieldValueForbidden",
                        Message: "Forbidden: cannot be set for a windows pod",
                        Field: "spec.securityContext.seLinuxOptions",
                    },
                    {
                        Type: "FieldValueForbidden",
                        Message: "Forbidden: cannot be set for a windows pod",
                        Field: "spec.containers[0].securityContext.capabilities",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 422,
        },
    }
    Pod "wrong-pod-os" is invalid: [spec.securityContext.seLinuxOptions: Forbidden: cannot be set for a windows pod, spec.containers[0].securityContext.capabilities: Forbidden: cannot be set for a windows pod]
occurred
test/e2e/framework/pods.go:99}


https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_kubernetes/1248/pull-ci-openshift-kubernetes-master-k8s-e2e-gcp/1519525511389253632
Comment 2 MinLi 2022-05-23 05:05:47 UTC 
I don't find similar error from https://search.ci.openshift.org/?search=cannot+be+set+for+a+windows+pod&maxAge=168h&context=1&type=junit&name=&excludeName=&maxMatches=5&maxBytes=20971520&groupBy=job in the last 7 days, set it verified.
Comment 5 errata-xmlrpc 2022-08-10 11:09:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069
Note You need to log in before you can comment on or make changes to this bug.