Description of problem: On installing MTC 1.7.5 on OCP 4.12, the migration operator pods are not spinning up due to PSA changes in OCP 4.12. Version-Release number of selected component (if applicable): OCP 4.12 MTC 1.7.5 How reproducible: Always Steps to Reproduce: Install MTC 1.7.5 on OCP 4.12 cluster Actual results: ReplicaSet failed to create pods with below error: ReplicaFailure True FailedCreate Events: Type Reason Age From Message ---- ------ ---- ---- ------- Warning FailedCreate <invalid> replicaset-controller Error creating: pods "migration-operator-68bf58c696-fj84p" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "operator" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "operator" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "operator" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") Expected results: MTC should be successfully installed on OCP 4.12 Additional info:
I think we will fix this with https://github.com/migtools/mig-operator/pull/852 Please test when able and let me know if it doesn't work so we can further investigate.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Migration Toolkit for Containers (MTC) 1.7.5 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7262