Uploaded image for project: 'Knative Serving'
  1. Knative Serving
  2. SRVKS-1044

[regression] 1.28 unable to create service with privileged port.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 1.28.0
    • 1.28.0
    • None
    • None

      Creating a service that requires a privileged port worked properly in 1.27, but fails on 1.28.

      Steps to reproduce:

      $ oc adm policy add-scc-to-user anyuid -z default 
clusterrole.rbac.authorization.k8s.io/system:openshift:scc:anyuid added: "default" 
$ kn service create func-git --image ghcr.io/jrangelramos/gitserver --scale-min 1 --scale-max 1 --port 80
Error: admission webhook "validation.webhook.serving.knative.dev" denied the request: validation failed: must not set the field(s): spec.template.spec.containers[0].securityContext.capabilities.add

              skontopo@redhat.com Stavros Kontopoulos
              jefframos Jefferson Ramos
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: