nulecule-library icon indicating copy to clipboard operation
nulecule-library copied to clipboard

Issue with persitent storage volume with newest openshift/origin

Open cdrage opened this issue 9 years ago • 0 comments

Seems that the latest docker pull openshift/origin has broken persistent storage security constraints.

1459269937 - [ERROR] - providers/openshift.py - 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}
1459269937 - [ERROR] - cli/main.py - 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}
Traceback (most recent call last):
  File "/opt/atomicapp/atomicapp/cli/main.py", line 118, in cli_func_exec
    cli_func(cli_func_args)
  File "/opt/atomicapp/atomicapp/cli/main.py", line 86, in cli_run
    nm.run(**argdict)
  File "/opt/atomicapp/atomicapp/nulecule/main.py", line 233, in run
    self.nulecule.run(cli_provider, dryrun)
  File "/opt/atomicapp/atomicapp/nulecule/base.py", line 191, in run
    component.run(provider_key, dryrun)
  File "/opt/atomicapp/atomicapp/nulecule/base.py", line 326, in run
    provider.run()
  File "/opt/atomicapp/atomicapp/providers/openshift.py", line 384, in run
    self.oc.deploy(url, artifact)
  File "/opt/atomicapp/atomicapp/providers/openshift.py", line 149, in deploy
    raise ProviderFailedException(msg)
ProviderFailedException: 403 {u'status': u'Failure', u'kind': u'Status', u'code': 403, u'apiVersion': u'v1', u'reason': u'Forbidden', u'details': {u'kind': u'pods', u'name': u'wordpress'}, u'message': u'pods "wordpress" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumes[0]: Invalid value: "persistentVolumeClaim": persistentVolumeClaim volumes are not allowed to be used]', u'metadata': {}}

Makefile:39: recipe for target 'openshift' failed
make: *** [openshift] Error 1

Could possibly be this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1293805

Fixed via

https://github.com/openshift/origin/pull/6884/

cdrage avatar Mar 29 '16 16:03 cdrage