search

kubevirt / demo

Easy to use KubeVirt demo based on minikube.
Apache License 2.0
109 stars 59 forks source link

A lot of issues with the minishift flow #61

Closed fabiand closed 6 years ago

fabiand commented 6 years ago

When trying to launch a VM on minishisft 1.18 and kubevirt 0.7.0-alpha.1:

…
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: 2018-06-18T09:53:32Z
    message: 'failed to create virtual machine pod: pods "virt-launcher-testvm-" is
      forbidden: unable to validate against any security context constraint: [spec.volumes[0]:
      Invalid value: "hostPath": hostPath volumes are not allowed to be used spec.containers[0].securityContext.securityContext.runAsUser:
      Invalid value: 0: must be in the ranges: [1000070000, 1000079999] spec.containers[1].securityContext.securityContext.runAsUser:
      Invalid value: 0: must be in the ranges: [1000070000, 1000079999] spec.containers[1].securityContext.privileged:
      Invalid value: true: Privileged containers are not allowed]'
    reason: FailedCreate
    status: "False"
    type: Synchronized
  phase: Pending
fabiand commented 6 years ago

@zvikorn can you take a look?

fabiand commented 6 years ago

My bad.

zvikorn commented 6 years ago

I had this issue when I tried to deploy my pod in minishift for host-assisted cloning feature. I solved this by adding: securityContext: privileged: true runAsUser: 0 within (part of) the 'containers' tag.

On Mon, Jun 18, 2018 at 12:55 PM, Fabian Deutsch notifications@github.com wrote:

When trying to launch a VM on minishisft 1.18 and kubevirt 0.7.0-alpha.1:

… status: conditions:

  • lastProbeTime: null lastTransitionTime: 2018-06-18T09:53:32Z message: 'failed to create virtual machine pod: pods "virt-launcher-testvm-" is forbidden: unable to validate against any security context constraint: [spec.volumes[0]: Invalid value: "hostPath": hostPath volumes are not allowed to be used spec.containers[0].securityContext.securityContext.runAsUser: Invalid value: 0: must be in the ranges: [1000070000, 1000079999] spec.containers[1].securityContext.securityContext.runAsUser: Invalid value: 0: must be in the ranges: [1000070000, 1000079999] spec.containers[1].securityContext.privileged: Invalid value: true: Privileged containers are not allowed]' reason: FailedCreate status: "False" type: Synchronized phase: Pending

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/kubevirt/demo/issues/61, or mute the thread https://github.com/notifications/unsubscribe-auth/AcepjFvJRuOchxjqPSyzI4mwmpBBeL0xks5t93kvgaJpZM4UrdmM .

fabiand commented 6 years ago

The readme should be so complete (and tested) that it will work out of the box.

This actually reminds me that we need to work on CI for the origin flow ..