Details
-
Bug
-
Resolution: Won't Do
-
Minor
-
maistra-1.0.0
-
None
-
MAISTRA 1.0.2
Description
When setting istio.tracing.jaeger.agentStrategy: DaemonSet the new daemonset fails to roll out with the following error:
Error creating: pods "jaeger-agent-daemonset-" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 5775: Host ports are not allowed to be used spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 5778: Host ports are not allowed to be used spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 6831: Host ports are not allowed to be used spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 6832: Host ports are not allowed to be used spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 14271: Host ports are not allowed to be used]
Running
oc adm policy add-scc-to-user hostnetwork -z jaeger -n istio-system
fixes this.
Attachments
Issue Links
- relates to
-
-
- Closed
-
