Hi All,

If you are introducing a new Kubernetes namespace with a new application, please also deploy the psp-rolebinding helm chart from the helm-charts repo. If this is not deployed, you may encounter deployment issues if the pod security plugin is enabled on the Kubernetes cluster.

To test, enable pod security plugin:

    system service-parameter-add kubernetes kube_apiserver admission_plugins=PodSecurityPolicy

    system service-parameter-apply Kubernetes

and then deploy your application.

Example of how to include the psp-rolebinding helm chart in your application:

https://opendev.org/starlingx/openstack-armada-app/commit/92ed6fecc714e373b98c740a24ae75069d4ccf43

https://opendev.org/starlingx/openstack-armada-app/commit/0cdedf8e447f5be0d74017aba669a5c28393a0e5

Thanks,

Jerry