"Waiting to retry addon deployment" status after relating ceph-client

Bug #1971595 reported by George Kraft
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kubernetes Control Plane Charm
Fix Released
High
George Kraft

Bug Description

After adding a kubernetes-control-plane:ceph-client relation, kubernetes-control-plane can enter a "waiting" status with the message: "Waiting to retry addon deployment"

From juju debug-log:

unit-kubernetes-control-plane-1: 2022-05-03 18:49:18 WARNING unit.kubernetes-control-plane/1.update-status Error from server (Invalid): error when creating "/root/snap/cdk-addons/10961/addons/csi-rbdplugin.yaml": DaemonSet.apps
 "csi-rbdplugin" is invalid: [spec.template.spec.containers[0].securityContext.privileged: Forbidden: disallowed by cluster policy, spec.template.spec.containers[1].securityContext.privileged: Forbidden: disallowed by cluster policy, spec.template.spec.containers[2].securityContext.privileged: Forbidden: disallowed by cluster policy]

This happens when the charm is configured with allow-privileged=auto. Adding the ceph-client relation should have restarted kube-apiserver with allow-privileged=true, but it didn't.

George Kraft (cynerva)
Changed in charm-kubernetes-master:
assignee: nobody → George Kraft (cynerva)
status: New → In Progress
importance: Undecided → High
Revision history for this message
George Kraft (cynerva) wrote :
Changed in charm-kubernetes-master:
milestone: none → 1.24
Revision history for this message
George Kraft (cynerva) wrote :
Changed in charm-kubernetes-master:
status: In Progress → Fix Committed
Changed in charm-kubernetes-master:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.