Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

case "TestMonitoringStackController/Verify_multi-namespace_support" failed on OCP 4.14 #311

Closed
lihongyan1 opened this issue Jul 13, 2023 · 1 comment

Comments

@lihongyan1
Copy link
Contributor

./test/run-e2e-ocp.sh
......
=== RUN   TestMonitoringStackController/Verify_multi-namespace_support
    monitoring_stack_controller_test.go:850: assertion failed: error is not nil: failed to create demo app test-ns-1/prometheus: pods "prometheus" is forbidden: violates PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "prometheus" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "prometheus" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "prometheus" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "prometheus" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost"): test-ns-1: deploying demo app failed
--- FAIL: TestMonitoringStackController (382.73s)

% oc version
Client Version: 4.13.1
Kustomize Version: v4.5.7
Server Version: 4.14.0-0.nightly-2023-07-11-092038
Kubernetes Version: v1.27.3+af29f64

It's a automation code issue, will fix it following solution
https://access.redhat.com/solutions/7002730

@lihongyan1
Copy link
Contributor Author

lihongyan1 commented Jul 14, 2023

After applying fix in solution https://access.redhat.com/solutions/7002730
promethes prod crashloopback for the following error

% oc logs prometheus
......
ts=2023-07-14T02:48:02.307Z caller=query_logger.go:91 level=error component=activeQueryTracker msg="Error opening query log file" file=/prometheus/queries.active err="open /prometheus/queries.active: permission denied"
panic: Unable to create mmap-ed active query log

goroutine 1 [running]:
github.com/prometheus/prometheus/promql.NewActiveQueryTracker({0x7ffe3121adca, 0xb}, 0x14, {0x3aba480, 0xc000859540})
	/app/promql/query_logger.go:121 +0x3cd
main.main()
	/app/cmd/prometheus/main.go:605 +0x6773

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant