Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-7921

AMQ 7.10 and 7.11 installation fails on Microshift 4.12.10 but works on 4.12.6

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • AMQ 7.11.0.OPR.1.GA, AMQ 7.10.2.OPR.1.GA
    • operator
    • None
    • False
    • None
    • False
    • Hide

      It works by modify the operator.yaml as follow

      
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop: ["ALL"]
          seccompProfile:
            type: RuntimeDefault          
      securityContext:
        runAsNonRoot: true
      Show
      It works by modify the operator.yaml as follow securityContext: allowPrivilegeEscalation: false capabilities: drop: [ "ALL" ] seccompProfile: type: RuntimeDefault securityContext: runAsNonRoot: true

    Description

      ReplicaSet status:

      Warning  FailedCreate  4m39s (x8 over 10m)  replicaset-controller  (combined from similar events): Error creating: pods "amq-broker-controller-manager-5bd987569f-g54q7" is forbidden: violates PodSecurity "restricted:latest": unrestricted capabilities (container "manager" must set securityContext.capabilities.drop=["ALL"]), seccompProfile (pod or container "manager" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

      Attachments

        Issue Links

          relates to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. ENTMQBR-6717 Add support for "Pod Security Admission"

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Resolved

          Activity

            People

              rhn-support-rkieley Roderick Kieley
              rhn-support-agagliar Antonio Gagliardi
              Mikhail Krutov
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated: