Alexander Wels
Alexander Wels
We did some security related changes in 1.55, can you try 1.54 and let me know if it works?
Interesting @mhenriks any thoughts on why we would be getting permission denied on a block device backed by rook-ceph-rbd?
I suspect its the RunAsNonRoot, maybe in combination with centos 7.9?
There are 2 components, the proxy (which runs in the cdi namespace) which simply forwards requests to the upload-server which runs in the user namespace. With #2410 the upload-server should...
So we found this https://kubernetes.io/blog/2021/11/09/non-root-containers-and-devices/ and we were wondering if that might fix the issue for you, basically setting `device_ownership_from_security_context = true' for your CRI. Let us know if that...
/retest-required
Good point, it would be enabled by default.