You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi! I faced with issue during installation on GKE Autopilot cluster/
Error: INSTALLATION FAILED: admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints. Violations details: {"[denied by autogke-default-linux-capabilities]":["linux capability 'CAP_CHOWN' on container 'changeowner' not allowed; Autopilot only allows the capabilities: 'AUDIT_WRITE,CHOWN,DAC_OVERRIDE,FOWNER,FSETID,KILL,MKNOD,NET_BIND_SERVICE,NET_RAW,SETFCAP,SETGID,SETPCAP,SETUID,SYS_CHROOT,SYS_PTRACE'."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume file-storage in container otelcol is accessed in write mode; disallowed in Autopilot.","hostPath volume varlibdockercontainers used in container otelcol uses path /var/lib/docker/containers which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/].","hostPath volume file-storage in container changeowner is accessed in write mode; disallowed in Autopilot."]} Requested by user: '<username>', groups: 'system:authenticated'.
Has anyone know how to fix this?
Thanks in advance!
The text was updated successfully, but these errors were encountered:
Hi! I faced with issue during installation on GKE Autopilot cluster/
Error: INSTALLATION FAILED: admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints. Violations details: {"[denied by autogke-default-linux-capabilities]":["linux capability 'CAP_CHOWN' on container 'changeowner' not allowed; Autopilot only allows the capabilities: 'AUDIT_WRITE,CHOWN,DAC_OVERRIDE,FOWNER,FSETID,KILL,MKNOD,NET_BIND_SERVICE,NET_RAW,SETFCAP,SETGID,SETPCAP,SETUID,SYS_CHROOT,SYS_PTRACE'."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume file-storage in container otelcol is accessed in write mode; disallowed in Autopilot.","hostPath volume varlibdockercontainers used in container otelcol uses path /var/lib/docker/containers which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/].","hostPath volume file-storage in container changeowner is accessed in write mode; disallowed in Autopilot."]} Requested by user: '<username>', groups: 'system:authenticated'.
Has anyone know how to fix this?
Thanks in advance!
The text was updated successfully, but these errors were encountered: