UNCLASSIFIED - NO CUI

Flux blocked by RKE2 default PSPs

  Warning  FailedCreate  4s (x15 over 87s)  replicaset-controller  Error creating: pods "helm-controller-9758d8566-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set]

Error from nightly CI. Due to an RKE2 bug in the default PSP (does not allow seccomp) the newer flux pods are being blocked since now a seccompProfile is being set on each of them.

Edited by Micah Nagel