Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

admission webhook "validation.gatekeeper.sh" denied the request #3337

Open
Raghuvarun594 opened this issue Mar 27, 2024 · 1 comment
Open
Labels
bug Something isn't working

Comments

@Raghuvarun594
Copy link

Hi Folks, Could anyone please help me on this
while i am launching my webserver pod facing this error
Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [allow-privilege-escalation] Privilege
escalation container is not allowed: airflow-webserver-container

kubernetes version :

Client Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.3", GitCommit:"434bfd82814af038ad94d62ebe59b133fcb50506", GitTreeState:"clean", BuildDate:"2022-10-12T10:57:26Z", GoVersion:"go1.19.2", Compiler:"gc", Platform:"windows/386"}
Kustomize Version: v4.5.7
Server Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"5d130885b649a257745a53ef52b6043885595d46", GitTreeState:"clean", BuildDate:"2023-11-02T19:48:17Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}
WARNING: version difference between client (1.25) and server (1.27) exceeds the supported minor version skew of +/-1

@Raghuvarun594 Raghuvarun594 added the bug Something isn't working label Mar 27, 2024
@ritazh
Copy link
Member

ritazh commented Apr 4, 2024

Looks like there are gatekeeper policies deployed in your cluster to enforce good practices. You should check your deployment to ensure there is no privilege containers configured in the deployment. https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants