My Oracle Support Banner

HowTo Resolve NFS Provisioner Pod Error (Doc ID 2722907.1)

Last updated on OCTOBER 27, 2020

Applies to:

Oracle Communications Billing and Revenue Management - Version 12.0.0.3.0 and later
Information in this document applies to any platform.

Goal

For the installation of Billing and Revenue Management (BRM) Cloud Native (CN) version 12 Patch Set 3, one has to follow the steps in the document: https://docs.oracle.com/cd/E51000_01/doc.120/f21893/prerequisites-brm-cloud-native-deployments1.htm .

After the execution of the Helm Install for NFS Server Provisioner, there were warning messages from the POD execution:

Warning FailedCreate statefulset/green-nfs-server-provisioner create Pod green-nfs-server-provisioner-0 in StatefulSet green-nfs-server-provisioner failed error: pods "green-nfs-server-provisioner-0" is forbidden: unable to validate against any security context constraint: [capabilities.add: Invalid value: "DAC_READ_SEARCH": capability may not be added capabilities.add: Invalid value: "SYS_RESOURCE": capability may not be added capabilities.add: Invalid value: "DAC_READ_SEARCH": capability may not be added capabilities.add: Invalid value: "SYS_RESOURCE": capability may not be added]


Also, the execution with the default security roles to users on Openshift generates the following message :

[<USERNAME>@<HOSTNAME> helm_charts]$ helm install green ./nfs-server-provisioner --namespace brm-brm12-apps-ti-qa --values ./nfs-server-provisioner/override-values.yaml --dry-run
Error: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource: clusterrolebindings.rbac.authorization.k8s.io "green-nfs-server-provisioner" is forbidden: User "TR700535" cannot get resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope


The user was only able to run this install process because the "Cluster Admin" role was given for small windows to just run the Helm Install command. This role will not be set for the helm users after this install execution step.

What is expected to be created by the nfs-server-provisioner?
What is the pod responsible for in the environment with what roles/changes?
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.