Question

execute k10_primer.sh in the ocp environment and two Warnings are displayed

  • 13 July 2023
  • 1 comment
  • 87 views

I execute curl -s https://docs.kasten.io/tools/k10_primer.sh | bash in the ocp environment and two Warnings are displayed, how should I solve it?

 

Thank you

 

 

Warning: clusterimagepolicies.signing.apps.tanzu.vmware.com "image-policy" not found. Image policy enforcement was not applied.

 

Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "k10primer" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "k10primer" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "k10primer" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "k10primer" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

 

 


 

 

 

 

 

 

 

 

 


1 comment

Userlevel 3
Badge +1

Hello Richard,

 

One of the errors means that you are unable to access any clusterimagepolices, the other means that primer is not running as root. Both of these are ok and will continue the process of verifying cluster environment is configured for K10.

 

Thanks

Emmanuel

Comment