-
Bug
-
Resolution: Done
-
Critical
-
Pipelines 1.19.0
-
False
-
-
False
-
-
Release Note Not Required
-
-
-
3
-
Pipelines Sprint pioneers 31
Description of problem:
tekton-chains-controller unable to create statefulset pods after enabling statefulset-ordinals for chains in tektonconfig
Prerequisites (if any, like setup, operators/versions):
Steps to Reproduce
- Deploy 1.19 operator on OCP 4.18
- Enable statefulset-ordinals for chains in tektonconfig using configuration as below
- Once the statefulset is enabled for chains controller, wait for the chains-controller statefulset pods to be created
chain: artifacts.oci.format: simplesigning artifacts.oci.storage: oci artifacts.pipelinerun.format: in-toto artifacts.pipelinerun.storage: oci artifacts.taskrun.format: in-toto artifacts.taskrun.storage: oci disabled: false options: {} performance: buckets: 2 disable-ha: false replicas: 2 statefulset-ordinals: true
oc get sts -n openshift-pipelines NAME READY AGE tekton-chains-controller 0/2 4m47s tekton-pipelines-controller 2/2 26h tekton-pipelines-remote-resolvers 2/2 26h tekton-results-postgres 1/1 26h tekton-results-watcher 2/2 124m
Actual results:
Pods are failing to create because of forbidden error
Events: Type Reason Age From Message ---- ------ ---- ---- ------- Warning FailedCreate 3s (x14 over 44s) statefulset-controller create Pod tekton-chains-controller-0 in StatefulSet tekton-chains-controller failed error: pods "tekton-chains-controller-0" is forbidden: unable to validate against any security context constraint: [provider "anyuid": Forbidden: not usable by user or serviceaccount, provider "pipelines-scc": Forbidden: not usable by user or serviceaccount, provider restricted-v2: .containers[0].runAsUser: Invalid value: 65532: must be in the ranges: [1000770000, 1000779999], provider "restricted": Forbidden: not usable by user or serviceaccount, provider "nonroot-v2": Forbidden: not usable by user or serviceaccount, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "logging-scc": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork-v2": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or serviceaccount]
Expected results:
chains-controller pods should be created after enabling statefulset ordials for chains
Reproducibility (Always/Intermittent/Only Once):
Acceptance criteria:
Definition of Done:
Build Details:
Additional info (Such as Logs, Screenshots, etc):
