Kubernetes Postgres pod - cannot create directory: Permission denied

[kTipSSIoYv]

Any idea how to resolve this error when setting up ManageIQ on Kuberentes?

kubectl  get pods
NAME                                 READY   STATUS             RESTARTS        AGE
httpd-56f5668868-cvmwc               1/1     Running            0               13m
manageiq-operator-7974dc9d8f-rh2cl   1/1     Running            0               13m
memcached-6fdf8ff9d-ckqvm            1/1     Running            0               13m
orchestrator-69cf98bf97-gpv5h        1/1     Running            1 (3m30s ago)   13m
postgresql-85ccd45fc6-8k24x          0/1     CrashLoopBackOff   7 (48s ago)     13m

[[email protected] ~]# kubectl  logs -f postgresql-85ccd45fc6-8k24x
mkdir: cannot create directory '/var/lib/pgsql/data/userdata': Permission denied

[Fryguy]

This is likely a problem with the storage or perhaps the storage class you have. @bdunne Can you help out here?

[bdunne]

This is usually due to the PV permissions being too restrictive (something like root/root 700). Since the postgres container runs as the postgres user (id 26) it doesn't have permissions to write in this case. I'd recommend making the permissions less restrictive on the PV (chmod 777 should work).

[kTipSSIoYv]

How should I change permission? I didn't create any yaml files for creating resources. I just used the manageiq-pod repo and used this documentation.

[kTipSSIoYv]

I exported the postgres pod yaml and added

  securityContext:
    fsGroup: 1000

Now its working.

[kTipSSIoYv]

@Fryguy @bdunne Any idea what manages the httpd kubernetes service? I mean like a deployment. I want to modify the service so I can add a annotation. If I delete the service it gets recreated. So something is managing it somewhere but I'm not sure what it is.

Update: Manually modified the httpd svc and recreated it.

[kTipSSIoYv]

What is the use of applicationDomain and is it necessary? I can't login right now. It redriects to applicationDomain value after entering creds.

I'm using NodePort to connect to manageIQ pod but can't get past login. I can get a domain name but right now I want to test it without it.

[bdunne]

The httpd service is managed by the ManageIQ operator. applicationDomain should be set to the hostname that will be used to access ManageIQ.