fusor / apb-examples

A repository of example ansible-playbook bundles. THIS REPO IS DEPRECATED. Please look at https://github.com/ansibleplaybookbundle/ For updated examples.
13 stars 26 forks source link

Add NGINX OSS APB #113

Closed alessfg closed 7 years ago

alessfg commented 7 years ago

To do:

dymurray commented 7 years ago

Hey @alessfg, is this PR ready to be tested or still WIP?

dymurray commented 7 years ago

FYI, we can handle pushing the image up to our org if you want, we set up autobuilds for it.

alessfg commented 7 years ago

The PR is ready to be tested @dymurray

dymurray commented 7 years ago

@alessfg In my test the APB pod executes properly and exits, but the deployment pod is stuck in the 'running' state:

[dymurray@dymurray nginx-oss-apb]$ oc get pods
NAME                                       READY     STATUS      RESTARTS   AGE
apb-92cc4a57-6aa9-48bc-8533-8fef332ff830   0/1       Completed   0          4m
nginx-oss-apb-1-deploy                     1/1       Running     0          3m
[dymurray@dymurray nginx-oss-apb]$ oc logs nginx-oss-apb-1-deploy 
--> Scaling nginx-oss-apb-1 to 1

At first glance I think this might have to do with the securitycontext params you specified like runAsUser. In our emails I believe you mentioned you were using catasb, could you elaborate on the environment you were using to test this with? Perhaps the issue is on my end.

dymurray commented 7 years ago

@alessfg My suspicion was correct:

[dymurray@dymurray nginx-oss-apb]$ oc logs nginx-oss-apb-1-deploy 
--> Scaling nginx-oss-apb-1 to 1
-->  FailedCreate: nginx-oss-apb-1 Error creating: pods "nginx-oss-apb-1-" is forbidden: unable to validate against any security context constraint: [securityContext.runAsUser: Invalid value: 1000090000: UID on container nginx-oss-apb does not match required range.  Found 1000090000, required min: 1000100000 max: 1000109999]
alessfg commented 7 years ago

Tested without specifying a scc uid and everything still works @dymurray. Thanks for the heads-up!

alessfg commented 7 years ago

Changes done @dymurray!

dymurray commented 7 years ago

ACK