-
Notifications
You must be signed in to change notification settings - Fork 227
Description
Is there any way to run odigos on GKE-autopilot mode.
ludobox@Neobrixs-MacBook-Pro ~ % odigos install
Detected cluster: Kubernetes kind: GKE
Detected cluster: Kubernetes version: 1.30.9-gke.1127000
Installing Odigos version v1.0.160 in namespace odigos-system ...
Creating namespace odigos-system ✔
Creating OdigosDeployment ✔
Creating OdigosConfig ✔
Creating OwnTelemetry Pipeline ✔
Creating DataCollection ✔
Creating InstrumentorW0307 16:01:00.905854 75762 warnings.go:70] AdmissionWebhookController: mutated namespaceselector of the webhooks to enforce GKE Autopilot policies.
W0307 16:01:01.201204 75762 warnings.go:70] AdmissionWebhookController: mutated namespaceselector of the webhooks to enforce GKE Autopilot policies.
W0307 16:01:04.511622 75762 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated Deployment odigos-system/odigos-instrumentor: adjusted 'cpu' resource to meet requirements for containers [manager] (see http://g.co/gke/autopilot-defaults).
✔
Creating SchedulerW0307 16:01:07.206055 75762 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated Deployment odigos-system/odigos-scheduler: adjusted 'cpu' resource to meet requirements for containers [manager] (see http://g.co/gke/autopilot-defaults).
✔
Creating OdigletW0307 16:01:09.761919 75762 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated DaemonSet odigos-system/odiglet: defaulted unspecified 'cpu' resource for containers [init, odiglet] (see http://g.co/gke/autopilot-defaults).
X
ERROR admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints.
Violations details: {"[denied by autogke-disallow-hostnamespaces]":["enabling hostPID is not allowed in Autopilot.","enabling hostNetwork is not allowed in Autopilot."],"[denied by autogke-disallow-privilege]":["container odiglet is privileged; not allowed in Autopilot","container init is privileged; not allowed in Autopilot"],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume run-dir in container odiglet is accessed in write mode; disallowed in Autopilot.","hostPath volume device-plugins-dir in container odiglet is accessed in write mode; disallowed in Autopilot.","hostPath volume kernel-debug in container odiglet is accessed in write mode; disallowed in Autopilot.","hostPath volume odigos used in container odiglet uses path /var/odigos which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/].","hostPath volume odigos in container init is accessed in write mode; disallowed in Autopilot."]}
Requested by user: 'XX@XX.XX', groups: 'system:authenticated'.
(base) neobrix@Neobrixs-MacBook-Pro ~ % odigos ui