Skip to content

bug: vcluster version too old for OpenShift #596

Description

@MikeSpreitzer

Describe the bug

I tried installing kubestellar v0.29.0 in an OpenShift 4.19 cluster.
Lots of pods in its1 will not run. Here is an example of one.

bash-5.3$ kubectl events --for pod/coredns-b5b5c4c6f-g99q6 -n kube-system
LAST SEEN              TYPE      REASON      OBJECT                        MESSAGE
64s (x17 over 6m47s)   Warning   SyncError   Pod/coredns-b5b5c4c6f-g99q6   Error syncing to physical cluster: admission webhook "policyeval.stackrox.io" denied the request: 
The attempted operation violated 1 enforced policy, described below:

Policy: Block images older than 1 year
- Description:
    ↳ Block deployments based on 1 year old images
- Rationale:
    ↳ Deployment based on 1 year old image, as such it is vulnerable to exploits due
      to the lack of security updates.
- Remediation:
    ↳ Re-deploy using newer up-to-date image.
- Violations:
    - Container 'coredns' has image created at 2023-02-06 18:31:00 (UTC)

Steps To Reproduce

See above.

Expected Behavior

vcluster ControlPlanes are usable on OpenShift.

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/dependencyIssues or PRs related to dependency changeskind/bugCategorizes issue or PR as related to a bug.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions