SumoLogic / sumologic-kubernetes-collection

Sumo Logic collection solution for Kubernetes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Failed installation on GKE Autopilot

ivan-molodoria opened this issue · comments

Hi! I faced with issue during installation on GKE Autopilot cluster/

Error: INSTALLATION FAILED: admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints. Violations details: {"[denied by autogke-default-linux-capabilities]":["linux capability 'CAP_CHOWN' on container 'changeowner' not allowed; Autopilot only allows the capabilities: 'AUDIT_WRITE,CHOWN,DAC_OVERRIDE,FOWNER,FSETID,KILL,MKNOD,NET_BIND_SERVICE,NET_RAW,SETFCAP,SETGID,SETPCAP,SETUID,SYS_CHROOT,SYS_PTRACE'."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume file-storage in container otelcol is accessed in write mode; disallowed in Autopilot.","hostPath volume varlibdockercontainers used in container otelcol uses path /var/lib/docker/containers which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/].","hostPath volume file-storage in container changeowner is accessed in write mode; disallowed in Autopilot."]} Requested by user: '<username>', groups: 'system:authenticated'.

Has anyone know how to fix this?

Thanks in advance!