{"action":"created","issue":{"url":"https://api.github.com/repos/rook/rook/issues/1314","repository_url":"https://api.github.com/repos/rook/rook","labels_url":"https://api.github.com/repos/rook/rook/issues/1314/labels{/name}","comments_url":"https://api.github.com/repos/rook/rook/issues/1314/comments","events_url":"https://api.github.com/repos/rook/rook/issues/1314/events","html_url":"https://github.com/rook/rook/issues/1314","id":282177712,"number":1314,"title":"OpenShift: insufficient permission inside the containers","user":{"login":"leseb","id":912735,"avatar_url":"https://avatars3.githubusercontent.com/u/912735?v=4","gravatar_id":"","url":"https://api.github.com/users/leseb","html_url":"https://github.com/leseb","followers_url":"https://api.github.com/users/leseb/followers","following_url":"https://api.github.com/users/leseb/following{/other_user}","gists_url":"https://api.github.com/users/leseb/gists{/gist_id}","starred_url":"https://api.github.com/users/leseb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leseb/subscriptions","organizations_url":"https://api.github.com/users/leseb/orgs","repos_url":"https://api.github.com/users/leseb/repos","events_url":"https://api.github.com/users/leseb/events{/privacy}","received_events_url":"https://api.github.com/users/leseb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"travisn","id":1048514,"avatar_url":"https://avatars0.githubusercontent.com/u/1048514?v=4","gravatar_id":"","url":"https://api.github.com/users/travisn","html_url":"https://github.com/travisn","followers_url":"https://api.github.com/users/travisn/followers","following_url":"https://api.github.com/users/travisn/following{/other_user}","gists_url":"https://api.github.com/users/travisn/gists{/gist_id}","starred_url":"https://api.github.com/users/travisn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/travisn/subscriptions","organizations_url":"https://api.github.com/users/travisn/orgs","repos_url":"https://api.github.com/users/travisn/repos","events_url":"https://api.github.com/users/travisn/events{/privacy}","received_events_url":"https://api.github.com/users/travisn/received_events","type":"User","site_admin":false},"assignees":[{"login":"travisn","id":1048514,"avatar_url":"https://avatars0.githubusercontent.com/u/1048514?v=4","gravatar_id":"","url":"https://api.github.com/users/travisn","html_url":"https://github.com/travisn","followers_url":"https://api.github.com/users/travisn/followers","following_url":"https://api.github.com/users/travisn/following{/other_user}","gists_url":"https://api.github.com/users/travisn/gists{/gist_id}","starred_url":"https://api.github.com/users/travisn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/travisn/subscriptions","organizations_url":"https://api.github.com/users/travisn/orgs","repos_url":"https://api.github.com/users/travisn/repos","events_url":"https://api.github.com/users/travisn/events{/privacy}","received_events_url":"https://api.github.com/users/travisn/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/rook/rook/milestones/8","html_url":"https://github.com/rook/rook/milestone/8","labels_url":"https://api.github.com/repos/rook/rook/milestones/8/labels","id":2891896,"number":8,"title":"0.8","description":"* Multiple storage backends\r\n  * Full design\r\n  * Refactor code base and repositories to enable\r\n  * Consider support for Minio, potentially early support for other backends time permitting\r\n* Switch CRDs to API Aggregation\r\n* Run on arbitrary PVs\r\n* Remove Rook API and CLI\r\n* Migrate CI and release pipelines to a solution hosted by the CNCF\r\n* Run with Least Privileged and possibly without privileged containers\r\n* Shutdown / restart issues\r\n* Support Kubernetes 1.7+ only\r\n* Ceph features and improvements\r\n  * Adding/removing disks (lifecycle issues, failures, 1 OSD per pod, etc.)\r\n  * Placement group balancer support (ceph-mgr module)\r\n  * Mon reliability (restarts, failing over too fast, ip changes, etc.)\r\n  * Mimic support","creator":{"login":"bassam","id":1463491,"avatar_url":"https://avatars3.githubusercontent.com/u/1463491?v=4","gravatar_id":"","url":"https://api.github.com/users/bassam","html_url":"https://github.com/bassam","followers_url":"https://api.github.com/users/bassam/followers","following_url":"https://api.github.com/users/bassam/following{/other_user}","gists_url":"https://api.github.com/users/bassam/gists{/gist_id}","starred_url":"https://api.github.com/users/bassam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bassam/subscriptions","organizations_url":"https://api.github.com/users/bassam/orgs","repos_url":"https://api.github.com/users/bassam/repos","events_url":"https://api.github.com/users/bassam/events{/privacy}","received_events_url":"https://api.github.com/users/bassam/received_events","type":"User","site_admin":false},"open_issues":17,"closed_issues":23,"state":"open","created_at":"2017-11-06T17:57:26Z","updated_at":"2018-05-16T14:32:19Z","due_on":null,"closed_at":null},"comments":45,"created_at":"2017-12-14T17:21:33Z","updated_at":"2018-05-18T14:55:42Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"**Bug Report**\r\n\r\nWhat happened:\r\n\r\nWhen trying to create a cluster the operator fails with:\r\n\r\n```\r\nop-cluster: failed to create cluster in namespace rook. failed to start the mons. failed to initialize ceph cluster info. failed to get cluster info. failed to create mon secret\r\ns. failed to create dir /var/lib/rook/rook. mkdir /var/lib/rook: permission denied\r\n```\r\n\r\nWhat you expected to happen:\r\n\r\nCluster creation should succeed.\r\n\r\nAdditional information:\r\n\r\nOpenShift uses the following feature to get fewer user privileges on application development where the expected user is 'root', see https://blog.openshift.com/jupyter-on-openshift-part-6-running-as-an-assigned-user-id/\r\n\r\nHow to reproduce it (minimal and precise):\r\n\r\nSimply run `kubectl create -f rook-cluster.yml`\r\n\r\n**Environment**:\r\n* OS (e.g. from /etc/os-release): CentOS Linux release 7.4.1708 (Core)\r\n* Kernel (e.g. `uname -a`): Linux k8s-master.example.com 3.10.0-693.11.1.el7.x86_64 #1 SMP Mon Dec 4 23:52:40 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux\r\n* Cloud provider or hardware configuration: VM 1 CPU, 4GB RAM\r\n* Rook version (use `rook version` inside of a Rook Pod): v0.6.0-80.g3dfb151\r\n* Kubernetes version (use `kubectl version`): v1.7.6+a08f5eeb62\r\n* Kubernetes cluster type (e.g. Tectonic, GKE, OpenShift): OpenShift\r\n* Ceph status (use `ceph health` in the [Rook toolbox](https://Rook.io/docs/Rook/master/toolbox.html)): no cluster yet\r\n"},"comment":{"url":"https://api.github.com/repos/rook/rook/issues/comments/390233436","html_url":"https://github.com/rook/rook/issues/1314#issuecomment-390233436","issue_url":"https://api.github.com/repos/rook/rook/issues/1314","id":390233436,"user":{"login":"fabianvf","id":2431974,"avatar_url":"https://avatars0.githubusercontent.com/u/2431974?v=4","gravatar_id":"","url":"https://api.github.com/users/fabianvf","html_url":"https://github.com/fabianvf","followers_url":"https://api.github.com/users/fabianvf/followers","following_url":"https://api.github.com/users/fabianvf/following{/other_user}","gists_url":"https://api.github.com/users/fabianvf/gists{/gist_id}","starred_url":"https://api.github.com/users/fabianvf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fabianvf/subscriptions","organizations_url":"https://api.github.com/users/fabianvf/orgs","repos_url":"https://api.github.com/users/fabianvf/repos","events_url":"https://api.github.com/users/fabianvf/events{/privacy}","received_events_url":"https://api.github.com/users/fabianvf/received_events","type":"User","site_admin":false},"created_at":"2018-05-18T14:55:42Z","updated_at":"2018-05-18T14:55:42Z","author_association":"NONE","body":"Tracking issue has been closed it seems, should we create and apply a specific SCC with proper permissions for the operator?"}}
{"actor":{"display_login":"fabianvf"}}