Created attachment 1907330 [details]
Complete logs of the test run

Description of problem:

HttpNodePortTest#nodePortTest and HttpsNodePortTest#nodePortTest (https://gitlab.hosts.mwqe.eng.bos.redhat.com/jbossqe-eap/openshift-eap-tests/-/blob/7.4.x/test-eap/src/test/java/com/redhat/xpaas/eap/nodeport/HttpNodePortTest.java) are tests in the OpenShift test suite testing building and deploying simple application using S2I.

On OCP 4.12 this test started to fail with the error message

Invoking command: curl -k http://192.169.3.127:32736 on node sdntmvxd-nfnkk-worker-0-qtndd failed.
 Error output is: error: PodSecurity violation error:
Ensure the target namespace has the appropriate security level set or consider creating a dedicated privileged namespace using:
 "oc create ns <namespace> -o yaml | oc label -f - pod-security.kubernetes.io/enforce=privileged pod-security.kubernetes.io/audit=privileged pod-security.kubernetes.io/warn=privileged".

Original error:
pods "sdntmvxd-nfnkk-worker-0-qtndd-debug" is forbidden: violates PodSecurity "restricted:v1.24": host namespaces (hostNetwork=true, hostPID=true, hostIPC=true), privileged (container "container-00" must not set securityContext.privileged=true), allowPrivilegeEscalation != false (container "container-00" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "container-00" must set securityContext.capabilities.drop=["ALL"]), restricted volume types (volume "host" uses restricted volume type "hostPath"), runAsNonRoot != true (pod or container "container-00" must set securityContext.runAsNonRoot=true), runAsUser=0 (container "container-00" must not set runAsUser=0), seccompProfile (pod or container "container-00" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

Complete tes logs and pod logs are attached.

Steps to Reproduce:
1. git clone git.mwqe.eng.bos.redhat.com:jbossqe-eap/openshift-eap-tests.git
2. cd openshift-eap-tests
3. mvn clean test -P74-openjdk11,eap-pit-xp3 -Dtest=HttpNodePortTest#nodePortTest

Additional info:

Issue occured on the OCP PIT test environment: https://main-jenkins-csb-interopqe.apps.ocp-c1.prod.psi.redhat.com/job/OpenShiftIntegratedProducts/job/jbosseap-7.4-openshift-4/65/

According to the error message pod security changes on OCP might be possible cause of this issue: https://connect.redhat.com/blog/important-openshift-changes-pod-security-standards