[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Cannot start pod from template



https://docs.openshift.org/latest/architecture/additional_concepts/authorization.html#security-context-constraints

Your service account isn't authorized to mount host paths - you want to add the service account "default" in project to the hostaccess SCC

    oadm policy add-scc-to-user hostaccess -z default 

That allows your pod to mount host volumes.

On Feb 12, 2016, at 8:38 AM, David Strejc <david strejc gmail com> wrote:

Dear all,

I got following error when I try to start application from template:

Error creating: Pod "cakephp-example-1-" is forbidden: unable to validate against any security context constraint: [spec.containers[0].securityContext.volumeMounts: invalid value 'test-volume', Details: Host Volumes are not allowed to be used] (9 times in the last 2 minutes, 52 seconds)

I've added:

  securityContext:
          privileged: true

into template DeploymentConfig definition and user who is creating app from template is in privileged scc group.

What am I doing wrong?

David Strejc
t: +420734270131
_______________________________________________
users mailing list
users lists openshift redhat com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]