-
Sub-task
-
Resolution: Done
-
Critical
-
None
-
None
-
None
-
None
-
False
-
None
-
False
-
-
-
Tracing Sprint # 229, Tracing Sprint # 230, Tracing Sprint # 231, Tracing Sprint # 232, Tracing Sprint # 233
The daemonset-features E2E test from the OpenTelemetry Collector Operator fails because the deployment of the following manifest fails:
apiVersion: opentelemetry.io/v1alpha1
kind: OpenTelemetryCollector
metadata:
name: daemonset
spec:
mode: daemonset
hostNetwork: true
config: |
receivers:
jaeger:
protocols:
grpc:
processors:
exporters:
logging:
service:
pipelines:
traces:
receivers: [jaeger]
processors: []
exporters: [logging]
When checking the description of the daemonset (kubectl describe daemonset daemonset-collector), this is the thrown error:
Warning FailedCreate 9s (x13 over 30s) daemonset-controller Error creating: pods "daemonset-collector-" is forbidden: unable to validate against any security context constraint: [provider "anyuid": Forbidden: not usable by user or serviceaccount, provider restricted-v2: .spec.securityContext.hostNetwork: Invalid value: true: Host network is not allowed to be used, spec.containers[0].securityContext.hostNetwork: Invalid value: true: Host network is not allowed to be used, spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 14250: Host ports are not allowed to be used, spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 8888: Host ports are not allowed to be used, provider "restricted": Forbidden: not usable by user or serviceaccount, provider "nonroot-v2": Forbidden: not usable by user or serviceaccount, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork-v2": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or service
The OTEL Collector Operator doesn't show any error messsage.