nulecule-library
nulecule-library copied to clipboard
Issue with persitent storage volume with newest openshift/origin
Seems that the latest docker pull openshift/origin has broken persistent storage security constraints.
1459269937 - [ERROR] - providers/openshift.py - 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}
1459269937 - [ERROR] - cli/main.py - 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}
Traceback (most recent call last):
File "/opt/atomicapp/atomicapp/cli/main.py", line 118, in cli_func_exec
cli_func(cli_func_args)
File "/opt/atomicapp/atomicapp/cli/main.py", line 86, in cli_run
nm.run(**argdict)
File "/opt/atomicapp/atomicapp/nulecule/main.py", line 233, in run
self.nulecule.run(cli_provider, dryrun)
File "/opt/atomicapp/atomicapp/nulecule/base.py", line 191, in run
component.run(provider_key, dryrun)
File "/opt/atomicapp/atomicapp/nulecule/base.py", line 326, in run
provider.run()
File "/opt/atomicapp/atomicapp/providers/openshift.py", line 384, in run
self.oc.deploy(url, artifact)
File "/opt/atomicapp/atomicapp/providers/openshift.py", line 149, in deploy
raise ProviderFailedException(msg)
ProviderFailedException: 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}
Makefile:39: recipe for target 'openshift' failed
make: *** [openshift] Error 1
Could possibly be this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1293805
Fixed via
https://github.com/openshift/origin/pull/6884/