HowTo Resolve NFS Provisioner Pod Error (Doc ID 2722907.1)

Last updated on MARCH 28, 2023

Applies to:

Goal

For the installation of Billing and Revenue Management (BRM) Cloud Native (CN) version 12 Patch Set 3, one has to follow the steps in the document: https://docs.oracle.com/cd/E51000_01/doc.120/f21893/prerequisites-brm-cloud-native-deployments1.htm .

After the execution of the Helm Install for NFS Server Provisioner, there were warning messages from the POD execution:

Warning FailedCreate statefulset/green-nfs-server-provisioner create Pod green-nfs-server-provisioner-0 in StatefulSet green-nfs-server-provisioner failed error: pods "green-nfs-server-provisioner-0" is forbidden: unable to validate against any security context constraint: [capabilities.add: Invalid value: "DAC_READ_SEARCH": capability may not be added capabilities.add: Invalid value: "SYS_RESOURCE": capability may not be added capabilities.add: Invalid value: "DAC_READ_SEARCH": capability may not be added capabilities.add: Invalid value: "SYS_RESOURCE": capability may not be added]

Also, the execution with the default security roles to users on Openshift generates the following message :

[<USERNAME>@<HOSTNAME> helm_charts]$ helm install green ./nfs-server-provisioner --namespace brm-brm12-apps-ti-qa --values ./nfs-server-provisioner/override-values.yaml --dry-run
Error: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource: clusterrolebindings.rbac.authorization.k8s.io "green-nfs-server-provisioner" is forbidden: User "TR700535" cannot get resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope

The user was only able to run this install process because the "Cluster Admin" role was given for small windows to just run the Helm Install command. This role will not be set for the helm users after this install execution step.

What is expected to be created by the nfs-server-provisioner?
What is the pod responsible for in the environment with what roles/changes?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.