OpenShift AI Tutorial (Fraud Detection) - unable to deploy created model
Issue
- OpenShift AI Tutorial (Fraud Detection) - unable to deploy created model
-
Following the OpenShift AI tutorial fraud detection
-
used the default MinIO S3 storage. The steps work fine up until attempting to deploy the model. At that point, unable to deploy either via the single model or multi-model options.
- Error creating pods 'fraud-predictor-xxxxx-deployment-zzzzzzz' is forbidden: unable to validate against any security context constraint.
- The error message suggests that there might be an issue with the security context constraints, and this issue is likely blocking the model deployment.
- Tried to set anyuid SCC to the service account but did not fix the issue
oc adm policy add-scc-to-user anyuid system:serviceaccounts:istio-system
- fraud-predictor-00001-deployment-xxxxxxx" is unable to spin up the initcontainer and the pods due to a SCC issue
Error creating pods 'fraud-predictor-00001-deployment-xxxxxxx' is forbidden unable to validate any security context constraint [provider "restricted-V2-nfs":Forbidden not usable by user or serviceaccount provider "pipelines-scc":Forbidden not usable by user or serviceaccount provider "run-as-ray-user": Forbidden not usable by user or serviceaccount provider "restricted-v2:initContainers[0].runAsUser:InvalidValue:1337:must be in the ranges:[1000000000:1000000000]........
Environment
- Red Hat OpenShift AI Self-Managed
- 2.18
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.