Updated the RKE2 Version to the latest stable version : v1.24.10+rke2r1 #31
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Issue:
Currently the RKE2 version used in this terraform script is v1.21.5+rke2r2
With this version when we try to do a Flux Bootstrap on the RKE2 we see the below error
E0207 05:26:13.205491 1 replica_set.go:532] sync "flux-system/source-controller-66969f4994" failed with pods "source-controller-66969f4994-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set] E0207 05:26:13.205536 1 replica_set.go:532] sync "flux-system/notification-controller-55cbd85d67" failed with pods "notification-controller-55cbd85d67-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set] E0207 05:26:13.205536 1 replica_set.go:532] sync "flux-system/kustomize-controller-79b77b857f" failed with pods "kustomize-controller-79b77b857f-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set p
According o this Bug fix : https://repo1.dso.mil/big-bang/bigbang/-/issues/1075 Fix for this was done as part of version v1.22 and above
Updating the RKE2 version in this terraform script fixes the above issue.
https://update.rke2.io/v1-release/channels