airshipit / treasuremap

Reference Airship manifests, CICD, and reference architecture.
http://openstack.org
Apache License 2.0
52 stars 39 forks source link

kubernetes-proxy apparmor issues #204

Closed nagajagan closed 2 years ago

nagajagan commented 2 years ago

Describe the bug Genesis could not progress while creating kube-system kubernetes-proxy pod. kubernetes-proxy pod is in blocked for ever. pod description and logs clearly mentions apparmor

Steps To Reproduce point treasurmap to following version 2227df4 Update mariadb-htk to correct commit hash Follow the documentation to bring up the genesis node.

Expected behavior kubernetes-proxy pod should be created within minutes and should go to blocked state.

Environment

Suggested fix/word around: Remove following lines from global/software/charts/kubernetes/proxy/kubernetes-proxy.yaml

  mandatory_access_control:
    type: apparmor
    kubernetes-proxy:
      proxy: localhost/kubeproxy-v1
nagajagan commented 2 years ago

Issues is addressed by removing apparmor related settings which doesn't apply to my environment.