Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-7386

Document AMQ Broker Operator behavior wih regard to Pod Security Admission

    XMLWordPrintable

Details

    • Task
    • Resolution: Obsolete
    • Undefined
    • None
    • None
    • documentation
    • None
    • False
    • None
    • False

    Description

      Operator 7.10.2 will be available on OCP 4.12 that enforces Pod Security Admission (PSa).
      There are some new behaviors that need to be mentioned in the release notes:

      • User is not recommended to use default or other openshift pre-created namespaces to deploy the operator as those namespaces don't have proper PSa configurations.
      • * on OCP 4.11 the operator will give some warnings like:
      configmap/activemq-artemis-manager-config created
W1031 11:43:02.427082  667463 warnings.go:70] would violate PodSecurity "restricted:v1.24": unrestricted capabilities (container "manager" must set securityContext.capabilities.drop=["ALL"]), seccompProfile (pod or container "manager" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/activemq-artemis-controller-manager created

      which is expected.

      Attachments

        Issue Links

          is related to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. ENTMQBR-6717 Add support for "Pod Security Admission"

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Resolved
          mentioned in

          Page Loading...

          Activity

            People

              jcliffor@redhat.com John Clifford
              gaohoward Howard Gao
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: