Failed installation on GKE Autopilot
ivan-molodoria opened this issue · comments
Hi! I faced with issue during installation on GKE Autopilot cluster/
Error: INSTALLATION FAILED: admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints. Violations details: {"[denied by autogke-default-linux-capabilities]":["linux capability 'CAP_CHOWN' on container 'changeowner' not allowed; Autopilot only allows the capabilities: 'AUDIT_WRITE,CHOWN,DAC_OVERRIDE,FOWNER,FSETID,KILL,MKNOD,NET_BIND_SERVICE,NET_RAW,SETFCAP,SETGID,SETPCAP,SETUID,SYS_CHROOT,SYS_PTRACE'."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume file-storage in container otelcol is accessed in write mode; disallowed in Autopilot.","hostPath volume varlibdockercontainers used in container otelcol uses path /var/lib/docker/containers which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/].","hostPath volume file-storage in container changeowner is accessed in write mode; disallowed in Autopilot."]} Requested by user: '<username>', groups: 'system:authenticated'.
Has anyone know how to fix this?
Thanks in advance!