- Notifications
You must be signed in to change notification settings - Fork 1.8k
Closed
Labels
triage/needs-informationIndicates an issue needs more information in order to work on it.Indicates an issue needs more information in order to work on it.
Milestone
Description
https://sdk.operatorframework.io/docs/building-operators/golang/quickstart/
The underlying operatorsdk --kind=Memcached called out in the Quickstart docs, Memcached, fails to deploy with an error like this:
│ Warning FailedCreate 18s (x13 over 39s) replicaset-controller Error creating: pods "memcached-operator-controller-manager-74cd5fb996-" is forbidden: unable to validate │ │ against any security context constraint: [spec.containers[0].securityContext.runAsUser: Invalid value: 65532: must be in the ranges: [1000600000, 1000609999] spec.cont │ │ ainers[1].securityContext.runAsUser: Invalid value: 65532: must be in the ranges: [1000600000, 1000609999]] This is likely due to changes in the gcr.io/distroless/static:nonroot image. Was able to fix the instantiated file config/manager/manager.yaml by removing runAsUser and adding runAsNonRoot: true to the spec.securityContext.
I'm not sure this is really a docs issue so much as at this point I'm researching where operator-sdk goes for "kinds" such that I might file an issue on the Memcached kind there instead. But it is true that the Quickstart doc currently doesn't produce a working example due to the problem.
Metadata
Metadata
Assignees
Labels
triage/needs-informationIndicates an issue needs more information in order to work on it.Indicates an issue needs more information in order to work on it.