compliantkubernetes-apps
compliantkubernetes-apps copied to clipboard
rook-ceph: error with network policies
Describe the bug The rook-ceph network policies fail wit the new rook version
To Reproduce Steps to reproduce the behaviour:
- Install the new rook-ceph
- Add the tolerations in the cluster.yaml and apply
- you will se the following error in rook-ceph-csi-detect-version:
failed to save command output to ConfigMap. failed to determine if ConfigMap rook-ceph-csi-detect-version is preexisting. Get "[https://10.243.0.1:443/api/v1/namespaces/rook-ceph/configmaps/rook-ceph-csi-detect-version](https://10.243.0.1/api/v1/namespaces/rook-ceph/configmaps/rook-ceph-csi-detect-version)": dial tcp 10.243.0.1:443: i/o timeout
- Change the default resources and apply
- you will see this error:
for: "...rook/cluster.yaml": Internal error occurred: failed calling webhook "cephcluster-wh-rook-ceph-admission-controller-rook-ceph.rook.io": failed to call webhook: Post "https://rook-ceph-admission-controller.rook-ceph.svc:443/validate-ceph-rook-io-v1-cephcluster?timeout=5s": dial tcp 10.243.68.139:443: i/o timeout
Expected behaviour Everything should work with the rook network policies.
Definition of Done
- the network policies are fixed for the new rook-ceph version and regular ops changes can be performed without issues