search

kubernetes-retired / federation

[EOL] Cluster Federation
Apache License 2.0
210 stars 82 forks source link

Create PodSecurityPolicy/ Roles on init #297

Closed alpe closed 5 years ago

alpe commented 5 years ago

Problem: When pod-security-policies are activated the api server and controller fail to start as there is no matching PodSecurityPolicy deployed/ roles are missing.

# kubectl -n federation-system describe rs apiserver-58fffb589c
Error creating: pods "apiserver-58fffb589c-" is forbidden: unable to validate against any pod security policy: []
alpe commented 5 years ago

I will test against https://github.com/kubernetes-sigs/federation-v2 . Closing this here.