Skip to content
This repository has been archived by the owner on May 15, 2023. It is now read-only.

Forseti GKE End2End gke master 1.14.10-gke.27 - proxy sql config.json failed: permission denied": unknown #72

Open
exenin opened this issue Apr 23, 2020 · 0 comments

Comments

@exenin
Copy link

exenin commented Apr 23, 2020

Warning Failed 13s (x2 over 14s) kubelet, gke-forseti-cluster-default-node-pool-64338854-2rf4 Error: failed to start container "cloudsql-proxy": Error response from daemon: OCI runtime create failed: container_l inux.go:345: starting container process caused "chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied": unknown

according to this, something changed to allowe security by default but also breaks sql proxy
GoogleCloudPlatform/cloud-sql-proxy#385

editing the cloudsql-proxy deploy and changing the runAsUser

from runAsUser: 2
to
runAsUser: 65532

seems to fix it

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant