Skip to content

bug: vcluster version too old for OpenShift #596

@MikeSpreitzer

Description

@MikeSpreitzer

Describe the bug

I tried installing kubestellar v0.29.0 in an OpenShift 4.19 cluster.
Lots of pods in its1 will not run. Here is an example of one.

bash-5.3$ kubectl events --for pod/coredns-b5b5c4c6f-g99q6 -n kube-system
LAST SEEN              TYPE      REASON      OBJECT                        MESSAGE
64s (x17 over 6m47s)   Warning   SyncError   Pod/coredns-b5b5c4c6f-g99q6   Error syncing to physical cluster: admission webhook "policyeval.stackrox.io" denied the request: 
The attempted operation violated 1 enforced policy, described below:

Policy: Block images older than 1 year
- Description:
    ↳ Block deployments based on 1 year old images
- Rationale:
    ↳ Deployment based on 1 year old image, as such it is vulnerable to exploits due
      to the lack of security updates.
- Remediation:
    ↳ Re-deploy using newer up-to-date image.
- Violations:
    - Container 'coredns' has image created at 2023-02-06 18:31:00 (UTC)

Steps To Reproduce

See above.

Expected Behavior

vcluster ControlPlanes are usable on OpenShift.

Additional Context

No response

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions