I tried to deploy ECK 2.7.0 on my Tanzu Kubernetes environment and get the following error message:
Warning Failed 5m6s (x2 over 5m7s) kubelet Error: container has runAsNonRoot and image will run as root (pod: "elastic-operator-0_srv247(2ddfe704-c0e9-4a5a-b916-5c5e646c6c4d)", container: manager)
I am using PSP and configured it the operator.yaml and crds.yaml accordingly. With ECK 2.6.1 everything runs without any errors.
The container spec in the operator.yaml is as follows:
containers: - image: "myownrepo/eck/eck-operator:2.7.0" imagePullPolicy: IfNotPresent name: manager args: - "manager" - "--config=/conf/eck.yaml" securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true env:
Are there changes to the 2.7.0 image which break my definition?