You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
When installing DirectPV 4.0.2 via the CLI (kubectl directpv install), a directpv namespace gets created.
If a pod security standard is enforced in the cluster, no containers will start as they lack dont conform to those standards.
To fix this, the namespace should be labelled with pod-security.kubernetes.io/enforce: privileged.
Someone seems to have already noticed that, as exactly that already exists as an annotation, which is however incorrect. https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/
To Reproduce
Install DirectPV via kubectl directpv install with a Pod Security Standard being enforced in the cluster.
Expected behavior
I expect the namespace to be labelled as described above
Screenshots and logs
The annotation here should be a label instead.
Deployment information (please complete the following information):
DirectPV version: 4.0.2
Kubernetes Version: 1.26.3
OS info: N/A
Kernel version: N/A
The text was updated successfully, but these errors were encountered:
Describe the bug
When installing DirectPV 4.0.2 via the CLI (
kubectl directpv install
), adirectpv
namespace gets created.If a pod security standard is enforced in the cluster, no containers will start as they lack dont conform to those standards.
To fix this, the namespace should be labelled with
pod-security.kubernetes.io/enforce: privileged
.Someone seems to have already noticed that, as exactly that already exists as an annotation, which is however incorrect.
https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/
To Reproduce
Install DirectPV via
kubectl directpv install
with a Pod Security Standard being enforced in the cluster.Expected behavior
I expect the namespace to be labelled as described above
Screenshots and logs
The annotation here should be a label instead.
Deployment information (please complete the following information):
The text was updated successfully, but these errors were encountered: