Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-999

aws driver toolkit jobs are permafailing

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • 4.12.0
    • Driver Toolkit
    • None
    • None
    • False
    • Hide

      None

      Show
      None

      periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-driver-toolkit is permafailing after the recent enforcement of pod security labels merged in https://github.com/openshift/cluster-kube-apiserver-operator/pull/1369.

      Example run:
      https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-driver-toolkit/1567569860995584000

      Error message:

      #### Driver Toolkit e2e test ####
      + set_artifact_dir
      + '[' -z /logs/artifacts ']'
      + echo 'Using ARTIFACT_DIR=/logs/artifacts.'
      Using ARTIFACT_DIR=/logs/artifacts.
      + oc version -o json
      + jq --raw-output .openshiftVersion
      + oc get clusterversion/version -oyaml
      + get_dtk_image_info
      + oc debug --image-stream=openshift/driver-toolkit:latest -n openshift --quiet -- bash -c 'echo "$SOURCE_GIT_URL/commit/$SOURCE_GIT_COMMIT"'
      Error from server (Forbidden): pods "image-debug" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "debug" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "debug" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "debug" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "debug" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 
      

              stbenjam Stephen Benjamin
              stbenjam Stephen Benjamin
              Udi Kalifon Udi Kalifon (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: