search

argoproj-labs / rollouts-plugin-trafficrouter-glooplatform

Apache License 2.0
0 stars 4 forks source link

permission issue in openshift #4

Open mortya opened 1 month ago

mortya commented 1 month ago

Tried to install the plugin for argo rollouts in openshift 4.14 and got an error:

time="2024-09-10T14:10:18Z" level=fatal msg="Failed to download plugins: failed to create plugin folder for plugin (solo-io/glooplatform): (mkdir /home/argo-rollouts/plugin-bin: permission denied)

Got it working via workaround. Sufficient to add the "privileged" scc to argo rollouts and make the deployment's pod template container be "privileged". Obviously this is not the right thing to do, but it's acceptable (somewhat) for testing. Should be fixed in the code.

ilrudie commented 1 day ago

Seems to be an issue with the way argo-rollouts itself handles plugins.

ilrudie commented 1 day ago

https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-openshift

The openshift plugin suggests that you put the binary in a location where your rollouts pods would be able to access it locally rather than specifying it as http url. That might be a good way to avoid needing higher privileges to download the plugin and write it somewhere.

the doc for rollouts has similar verbiage as well