After upgrading the RHOCP cluster to v4.11, PodSecurityViolation alerts are triggered in must-gather namespace in RHOCP4
Issue
-
After
upgradingthe RHOCP cluster to a version4.11.46+, thePodSecurityViolationalerts in must-gather namespaces are still being triggered..... .... openshift-must-gather-nwkkr pods would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (containers "gather", "copy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "gather", "copy" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "gather", "copy" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "gather", "copy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") .... ....
Environment
- Red Hat OpenShift Container Platform
- 4.11+
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.