Closed alessfg closed 7 years ago
Hey @alessfg, is this PR ready to be tested or still WIP?
FYI, we can handle pushing the image up to our org if you want, we set up autobuilds for it.
The PR is ready to be tested @dymurray
@alessfg In my test the APB pod executes properly and exits, but the deployment pod is stuck in the 'running' state:
[dymurray@dymurray nginx-oss-apb]$ oc get pods
NAME READY STATUS RESTARTS AGE
apb-92cc4a57-6aa9-48bc-8533-8fef332ff830 0/1 Completed 0 4m
nginx-oss-apb-1-deploy 1/1 Running 0 3m
[dymurray@dymurray nginx-oss-apb]$ oc logs nginx-oss-apb-1-deploy
--> Scaling nginx-oss-apb-1 to 1
At first glance I think this might have to do with the securitycontext params you specified like runAsUser
. In our emails I believe you mentioned you were using catasb, could you elaborate on the environment you were using to test this with? Perhaps the issue is on my end.
@alessfg My suspicion was correct:
[dymurray@dymurray nginx-oss-apb]$ oc logs nginx-oss-apb-1-deploy
--> Scaling nginx-oss-apb-1 to 1
--> FailedCreate: nginx-oss-apb-1 Error creating: pods "nginx-oss-apb-1-" is forbidden: unable to validate against any security context constraint: [securityContext.runAsUser: Invalid value: 1000090000: UID on container nginx-oss-apb does not match required range. Found 1000090000, required min: 1000100000 max: 1000109999]
Tested without specifying a scc uid and everything still works @dymurray. Thanks for the heads-up!
Changes done @dymurray!
ACK
To do: