https://docs.openshift.org/latest/architecture/additional_concepts/authorization.html#security-context-constraints
Your service account isn't authorized to mount host paths - you want to add
the service account "default" in project to the hostaccess SCC
oadm policy add-scc-to-user hostaccess -z default
That allows your pod to mount host volumes.
On Feb 12, 2016, at 8:38 AM, David Strejc <[email protected]> wrote:
Dear all,
I got following error when I try to start application from template:
Error creating: Pod "cakephp-example-1-" is forbidden: unable to validate
against any security context constraint:
[spec.containers[0].securityContext.volumeMounts: invalid value
'test-volume', Details: Host Volumes are not allowed to be used] (9 times
in the last 2 minutes, 52 seconds)
I've added:
securityContext:
privileged: true
into template DeploymentConfig definition and user who is creating app from
template is in privileged scc group.
What am I doing wrong?
David Strejc
t: +420734270131
e: [email protected]
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
