Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pod not supported on Fargate: invalid SecurityContext fields: Privileged #1329

Open
anthosz opened this issue Apr 26, 2024 · 2 comments
Open
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@anthosz
Copy link

anthosz commented Apr 26, 2024

/kind bug

What happened?
Unable to use fargate for the efs-csi-controller:

│   Warning  FailedScheduling  11m   fargate-scheduler  Pod not supported on Fargate: invalid SecurityContext fields: Privileged                                                            │

What you expected to happen?
The pod spawn on fargate

How to reproduce it (as minimally and precisely as possible)?
Create a fargate profile
Install the latest helm chart version of efs-csi-driver: 3.0.1

Environment

  • Kubernetes version (use kubectl version): 1.29 (EKS)
  • Driver version: v2.0.1
@k8s-ci-robot k8s-ci-robot added the kind/bug Categorizes issue or PR as related to a bug. label Apr 26, 2024
@anthosz
Copy link
Author

anthosz commented Apr 29, 2024

Probably related to #1100

@anthosz
Copy link
Author

anthosz commented Apr 29, 2024

Workaround found:
Due to the fact deleteAccessPointRootDir is set to false by default, containerSecurityContext.privileged was set to false (seems only used by deleteAccessPointRootDir).

To check if default values.yaml can be aligned (both to true or both to false) in addition of this issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

No branches or pull requests

2 participants