Flux blocked by RKE2 default PSPs
Warning FailedCreate 4s (x15 over 87s) replicaset-controller Error creating: pods "helm-controller-9758d8566-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set]
Error from nightly CI. Due to an RKE2 bug in the default PSP (does not allow seccomp) the newer flux pods are being blocked since now a seccompProfile is being set on each of them.
Edited by Micah Nagel