k8s-ci-robot
commented
1 year ago @vikrantoct7: This issue is currently awaiting triage.
If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.
The triage/accepted label can be added by org members by writing /triage accepted in a comment.
Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
longwuyuan
vikrantoct7
tao12345666333
strongjz
We are doing provisioning for Azure kubernetes and trying to deploy nginx ingress using helm. Below is helm command. We downloaded helmchart and added in code repo. we are trying to deploy helm chart using folder location REGISTRY_NAME=$(REGISTRY_NAME) CONTROLLER_IMAGE=ingress-nginx/controller CONTROLLER_TAG=v1.5.1 PATCH_IMAGE=ingress-nginx/kube-webhook-certgen PATCH_TAG=v20220916-gd32f8c343 DEFAULTBACKEND_IMAGE=defaultbackend-amd64 DEFAULTBACKEND_TAG=1.5 ACR_URL=$(REGISTRY_NAME).azurecr.io helm install --replace ingress-nginx $(System.DefaultWorkingDirectory)/ingress-nginx \ --namespace ingress-nginx \ --create-namespace \ --set controller.replicaCount=2 \ --set controller.nodeSelector."kubernetes.io/os"=linux \ --set controller.image.registry=$ACR_URL \ --set controller.image.image=$CONTROLLER_IMAGE \ --set controller.image.tag=$CONTROLLER_TAG \ --set controller.image.digest="" \ --set controller.admissionWebhooks.patch.nodeSelector."kubernetes.io/os"=linux \ --set controller.service.annotations."service.beta.kubernetes.io/azure-load-balancer-health-probe-request-path"=/healthz \ --set controller.admissionWebhooks.patch.image.registry=$ACR_URL \ --set controller.admissionWebhooks.patch.image.image=$PATCH_IMAGE \ --set controller.admissionWebhooks.patch.image.tag=$PATCH_TAG \ --set controller.admissionWebhooks.patch.image.digest="" \ --set defaultBackend.nodeSelector."kubernetes.io/os"=linux \ --set defaultBackend.image.registry=$ACR_URL \ --set defaultBackend.image.image=$DEFAULTBACKEND_IMAGE \ --set defaultBackend.image.tag=$DEFAULTBACKEND_TAG \ --set defaultBackend.image.digest="" \ -f $(System.DefaultWorkingDirectory)/internal-ingress.yaml Followed MS article https://learn.microsoft.com/en-us/azure/aks/ingress-basic?tabs=azure-cli
Customer has enabled a Azure policy "Ensure cluster containers have readiness or liveness probes configured" at subscription level. Due to this policy, we are getting below error
Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [azurepolicy-k8sazurev2containerenforceprob-2beef1c35b38e59820d1] Container in your Pod has no . Required probes: ["readinessProbe", "livenessProbe"]
Not sure what and where we are doing wrong. Why this policy is violating however when i do deployment using yaml base https://github.com/kubernetes/ingress-nginx/blob/main/deploy/static/provider/cloud/deploy.yaml then it successful with making bit changes. guide us to resolve this issue