knative admission webhook: validation failed: Persistent volume claim support is disabled

Question

I am trying to deploy service on eks with knative installed on eks, here eks configured with fargate-profile. I want to mount efs to my service for that i have created StorageClass,PersistentVolume and PersistentVolumeClaim below are the respective yml

storageclass.yml

kind: StorageClass
apiVersion: storage.k8s.io/v1
metadata:
  name: my-sc
provisioner: efs.csi.aws.com
parameters:
  provisioningMode: efs-ap
  fileSystemId: fs-1234
  directoryPerms: "775"
reclaimPolicy: Retain

efs-pv.yml

kind: PersistentVolume
metadata:
  name: my-pv
spec:
  capacity:
    storage: 100Gi
  volumeMode: Filesystem
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
  storageClassName: my-sc
  csi:
    driver: efs.csi.aws.com
    volumeHandle: fs-1234

efs-pvc.yml

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: my-pvc
spec:
  accessModes:
    - ReadWriteMany
  storageClassName: my-sc
  resources:
    requests:
      storage: 100Gi

all the sc, pv and pvc get created successfully

Now I am trying to use my-pvc in my Service my-service.yml like below

apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: myservice
  annotations:
    serving.knative.dev/efs-storage-class: my-sc
spec:
  template:
    spec:
      containers:
        - env:
            - name: key
              value: val
          image: image:latest
          ports:
            - containerPort: 8080
          volumeMounts:
            - mountPath: /app/data
              name: data
              readOnly: true # warning were given for not setting readOnly=true
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: my-pvc
            readOnly: true
    metadata:
      annotations:
        autoscaling.knative.dev/metric: concurrency
        autoscaling.knative.dev/target: '1'
        autoscaling.knative.dev/minScale: '1'
        autoscaling.knative.dev/maxScale: '5'
        autoscaling.knative.dev/scaleDownDelay: 60s
        autoscaling.knative.dev/window: 600s

when I try to run following command kubectl apply -f my-service.yml it gives validation error, here the complete error

Error from server (BadRequest): error when creating "my-service.yml": admission webhook "validation.webhook.serving.knative.dev" denied the request: validation failed: Persistent volume claim support is disabled, but found persistent volume claim my-pvc: must not set the field(s): spec.template.spec.volumes[0].persistentVolumeClaim

Error simply means PVC is disabled, in order to use PVC I need to enable PVC.

But How and where(in configMap?)?

in In serving-core.yml i found kubernetes.podspec-persistent-volume-claim: "Disabled" which is example.

So I have tried to add configMap (Just guess) with kubernetes.podspec-persistent-volume-claim like below:

apiVersion: v1
kind: ConfigMap
metadata:
  namespace: knative-serving
  name: kubernetes.podspec-persistent-volume-claim
data:
  kubernetes.podspec-persistent-volume-claim: enabled

But nothing changed only configmap got created, Any help will be appreciated

score 1 · Answer 1 · answered Apr 14 '23 at 12:26

1

You need to set the flag in the config-features ConfigMap. That ConfigMap should already have one key, named _example. You'll need to add your key above or below the example. The _example key is ignored by Knative, but provides a place for documentation for system administrators.

answered Apr 14 '23 at 12:26

E. Anderson

3,405
1
16
19

It will great if you add example here – Hitesh Ghuge Apr 16 '23 at 07:17
I have already tried with that, but like create with default value as disabled and then tried to update values as enabled like `kubernetes.podspec-persistent-volume-claim: enabled` and `kubernetes.podspec-persistent-volume-write: enabled`. it didn't refelct changes. Then I deleted my `EKS` and instead of create config-features with default values and then update. I simply created `config-features` with default value enabled for both `configmap-keys`. – Hitesh Ghuge Apr 17 '23 at 10:58
This is weird but I''l try to reproduce this scenario and will update the finding in my question itself. – Hitesh Ghuge Apr 17 '23 at 11:00

knative admission webhook: validation failed: Persistent volume claim support is disabled

1 Answers1