vectordotdev / vector

A high-performance observability data pipeline.
https://vector.dev
Mozilla Public License 2.0
18.12k stars 1.6k forks source link

Support Vector on Autopilot GKE #16871

Open nikicat opened 2 years ago

nikicat commented 2 years ago

Installation fails with this error on GKE Autopilot cluster:

Error: INSTALLATION FAILED: admission webhook "gkepolicy.common-webhooks.networking.gke.io" denied the request: GKE Policy Controller rejected the request because it violates one or more policies: {"[denied by autogke-no-write-mode-hostpath]":["hostPath volume data in container vector is accessed in write mode; disallowed in Autopilot. Requested by user: '<...>', groups: 'system:authenticated'.","hostPath volume var-lib used in container vector uses path /var/lib which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/]. Requested by user: '<...>', groups: 'system:authenticated'.","hostPath volume procfs used in container vector uses path /proc which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/]. Requested by user: '<...>', groups: 'system:authenticated'.","hostPath volume sysfs used in container vector uses path /sys which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/]. Requested by user: '<...>', groups: 'system:authenticated'."]}
StephenWakely commented 1 year ago

This will first need some investigating to ascertain how long it will take to make the required changes.

Roguelazer commented 1 month ago

Is there anything that users can do to help with that investigation?