Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

admission webhook "validation.gatekeeper.sh" denied the request #3337

Closed
Raghuvarun594 opened this issue Mar 27, 2024 · 2 comments
Closed

admission webhook "validation.gatekeeper.sh" denied the request #3337

Raghuvarun594 opened this issue Mar 27, 2024 · 2 comments
Labels
bug Something isn't working stale

Comments

@Raghuvarun594
Copy link

Hi Folks, Could anyone please help me on this
while i am launching my webserver pod facing this error
Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [allow-privilege-escalation] Privilege
escalation container is not allowed: airflow-webserver-container

kubernetes version :

Client Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.3", GitCommit:"434bfd82814af038ad94d62ebe59b133fcb50506", GitTreeState:"clean", BuildDate:"2022-10-12T10:57:26Z", GoVersion:"go1.19.2", Compiler:"gc", Platform:"windows/386"}
Kustomize Version: v4.5.7
Server Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"5d130885b649a257745a53ef52b6043885595d46", GitTreeState:"clean", BuildDate:"2023-11-02T19:48:17Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}
WARNING: version difference between client (1.25) and server (1.27) exceeds the supported minor version skew of +/-1

@Raghuvarun594 Raghuvarun594 added the bug Something isn't working label Mar 27, 2024
@ritazh
Copy link
Member

ritazh commented Apr 4, 2024

Looks like there are gatekeeper policies deployed in your cluster to enforce good practices. You should check your deployment to ensure there is no privilege containers configured in the deployment. https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

Copy link

stale bot commented Jun 3, 2024

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Jun 3, 2024
@stale stale bot closed this as completed Jun 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working stale
Projects
None yet
Development

No branches or pull requests

2 participants