centos-sig-hyperscale / sig

#137 migrate to the new openshift instance
Closed by ngompa. Opened by dcavalca.

Closed
Reopen Issue

We need to move our stuff to the new openshift by March 2023:
https://lists.centos.org/pipermail/ci-users/2022-December/004630.html

There's a migration guide at https://sigs.centos.org/guide/ci/#migration-to-new-ci-instance

The new instance is up at https://console-openshift-console.apps.ocp.cloud.ci.centos.org and all SIG members should already have access to it.

Metadata Update from @ngompa:
- Issue assigned to ngompa

I think I've migrated everything over, though I got some warnings when I did:

ngompa@fedora ~/t/c/o/hyperscale> oc create -f Deployments.yaml 
W0401 14:59:13.573996 3731515 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "linux" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "linux" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "linux" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "linux" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/linux created
W0401 14:59:13.617451 3731515 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "package-updates" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "package-updates" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "package-updates" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "package-updates" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/package-updates created
W0401 14:59:13.663789 3731515 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "systemd-cd" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "systemd-cd" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "systemd-cd" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "systemd-cd" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/systemd-cd created
W0401 14:59:13.703601 3731515 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "systemd-git-update" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "systemd-git-update" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "systemd-git-update" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "systemd-git-update" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/systemd-git-update created

This is done, just waiting on c8s-builder container to be fixed, but that's independent of the rest of the migration work being done.

Metadata Update from @ngompa:
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.