fluentbit hostPath

[KrawczowaKris]

Hi team,

we are using pod-security.kubernetes.io/enforce=baseline PSA for a namespace that contains logging resources. So we encounter the following error when deploying the fluentbit daemonset:

Events:
  Type     Reason        Age                   From                  Message
  ----     ------        ----                  ----                  -------
  Warning  FailedCreate  46m                   daemonset-controller  Error creating: pods "tekton-logs-fluentbit-d5b98" is forbidden: violates PodSecurity "baseline:v1.27": hostPath volumes (volumes "varlibcontainers", "varlogs")

Is there an alternative way to configure FluentBit without using hostPath volumes?

[sebastiangaiser]

Hey, I'm not a maintainer but the short answer is no.
baseline pod security is preventing to use hostPath volumes: https://kubernetes.io/docs/concepts/security/pod-security-standards/
You need to either set it to privileged or disable the pod-security.

This might be related to: #1908