Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The example : https://github.com/rancher/local-path-provisioner?tab=readme-ov-file#usage is failing #456

Open
raphael10-collab opened this issue Oct 1, 2024 · 2 comments
Labels

Comments

@raphael10-collab
Copy link

The example : https://github.com/rancher/local-path-provisioner?tab=readme-ov-file#usage is failing :

raphy@raohy:~/.talos/local-path-provisioner$ kubectl apply -f pod.yaml 
Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "volume-test" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "volume-test" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "volume-test" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "volume-test" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
pod/volume-test created
raphy@raohy:~/.talos/local-path-provisioner$ 
raphy@raohy:~/.talos/local-path-provisioner$ kubectl get pv
No resources found
raphy@raohy:~/.talos/local-path-provisioner$ kubectl get pvc
NAME             STATUS    VOLUME   CAPACITY   ACCESS MODES   STORAGECLASS   VOLUMEATTRIBUTESCLASS   AGE
local-path-pvc   Pending                                      local-path     <unset>                 36s
raphy@raohy:~/.talos/local-path-provisioner$ kubectl get pod
NAME          READY   STATUS    RESTARTS   AGE
volume-test   0/1     Pending   0          37s
@nfillot
Copy link

nfillot commented Oct 24, 2024

@raphael10-collab Talos enables Pod Security so you need to configure the plugin or set the pod-security.kubernetes.io/enforce label on the namespace

Copy link

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the stale label Dec 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants