Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to run st2client , st2web, st2actionrunner as stanley user after adding securityContext #406

Open
speaktoabu opened this issue Mar 8, 2024 · 5 comments

Comments

@speaktoabu
Copy link

speaktoabu commented Mar 8, 2024

  • Added the following security context for st2client & st2actionrunner.. Getting the following error
securityContext:
          allowPrivilegeEscalation: false
          runAsNonRoot: true
          runAsUser: 1000

st2actionrunner

 unable to open log file: open /root/.sdm/sdm.log: permission denied                                                                                                 
│ unable to open log file: open /root/.sdm/sdm.log: permission denied       
                                                                                     │

st2web:

 /bin/bash: /etc/nginx/conf.d/st2.conf: Permission denied

st2client:

stream logs failed container "generate-st2client-config" in pod "stackstorm-st2client-xxx" is waiting to start: CreateContainerConfigError for stackstorm/stackstorm-st2client-xxx (generate-st2client-config)
@cognifloyd
Copy link
Member

Related: #185 (for st2web)

@cognifloyd
Copy link
Member

I suspect #400 will resolve this.

@speaktoabu
Copy link
Author

Thanks @cognifloyd .. Is there any ETA for #185 #400 ?

@cognifloyd
Copy link
Member

I'm waiting on the author of #400 to respond to my feedback.

@jk464
Copy link
Contributor

jk464 commented May 7, 2024

Yes sorry - i'll try to get to #400 soon, I'm aware of a few issues I found while I doing further testing so I'll need to fix those and address your comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants