krateoplatformops / core-provider

0 stars 2 forks source link

Openshift refuse to sync pod due to security context policy #47

Closed matteogastaldello closed 4 months ago

matteogastaldello commented 4 months ago

Describe the bug runAsUser: 2000 not accepted by openshift policy.

Warning SyncError 75s (x15 over 2m37s) pod-syncer Error syncing to physical cluster: pods "krateospringbootwebapps-v0-1-2-controller-67b7bbbdd5-541171ff46" is forbidden: unable to validate against any security context constraint: [provider "sonarqube-privileged-scc": Forbidden: not usable by user or serviceaccount, provider "anyuid": Forbidden: not usable by user or serviceaccount, provider restricted-v2: .containers[0].runAsUser: Invalid value: 2000: must be in the ranges: [1001130000, 1001139999], provider "restricted": Forbidden: not usable by user or serviceaccount, provider "nonroot-v2": Forbidden: not usable by user or serviceaccount, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork-v2": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or serviceaccount]