[BUG] service kube-apiserver exited with error: failed to initialize admission

[kalloa]

What happened?

Hi,
I've followed this https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/installing/microshift-install-rpm#doc-wrapper doc to install MicroShift, but the service kube-apiserver doesn't start right after the install.
Could you please help me with it?

What did you expect to happen?

I would expect that service kube-apiserver starts normally

How to reproduce it (as minimally and precisely as possible)?

1. $ sudo vgs
   here is the output:

VG #PV #LV #SN Attr VSize VFree
rhel 1 0 0 wz--n- <50.00g <50.00g

2. $ sudo subscription-manager repos --enable rhocp-4.12-for-rhel-8-$(uname -i)-rpms --enable fast-datapath-for-rhel-8-$(uname -i)-rpms
3. $ sudo dnf install -y microshift openshift-clients
4. $ sudo vi /etc/crio/openshift-pull-secret
5. $ sudo systemctl enable --now microshift
   here is the output:

Created symlink /etc/systemd/system/multi-user.target.wants/microshift.service → /usr/lib/systemd/system/microshift.service.
Job for microshift.service failed because the service did not take the steps required by its unit configuration.
See "systemctl status microshift.service" and "journalctl -xe" for details.

Anything else we need to know?

Environment

• MicroShift version (use microshift version):
  MicroShift Version: 4.12.8
  Base OCP Version: 4.12.8
• Hardware configuration:
  KVM virtual machine, CPU AMD EPYC 7452, 4core + 4GB mem, 50G root disk + 50G for VG
• OS (e.g: cat /etc/os-release):
  NAME="Red Hat Enterprise Linux"
  VERSION="8.7 (Ootpa)"
  ID="rhel"
  ID_LIKE="fedora"
  VERSION_ID="8.7"
  PLATFORM_ID="platform:el8"
  PRETTY_NAME="Red Hat Enterprise Linux 8.7 (Ootpa)"
  ANSI_COLOR="0;31"
  CPE_NAME="cpe:/o:redhat:enterprise_linux:8::baseos"
  HOME_URL="https://www.redhat.com/"
  DOCUMENTATION_URL="https://access.redhat.com/documentation/red_hat_enterprise_linux/8/"
  BUG_REPORT_URL="https://bugzilla.redhat.com/"
• Kernel (e.g. uname -a):
  4.18.0-425.13.1.el8_7.x86_64
• Others:

Relevant logs

Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: Error: failed to initialize admission: failed to initialize admission plugin "PodSecurity": PodSecurity configuration error: [enforce: must be one of privileged, base>
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: kube-apiserver E0323 06:24:05.160335 13135 manager.go:116] service kube-apiserver exited with error: failed to initialize admission: failed to initialize admission >
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: kube-apiserver I0323 06:24:05.160370 13135 shared_informer.go:255] Waiting for caches to sync for node_authorizer
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: ??? I0323 06:24:05.160407 13135 run.go:154] Interrupt received. Stopping services
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: network-configuration I0323 06:24:05.160632 13135 manager.go:119] network-configuration completed
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: ??? E0323 06:24:05.160640 13135 run.go:129] Stopped service-manager: context canceled
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com microshift[13135]: ??? I0323 06:24:05.160652 13135 run.go:164] MicroShift stopped
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: microshift.service: Failed with result 'protocol'.
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: Failed to start MicroShift.
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: microshift.service: Consumed 398ms CPU time
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: microshift.service: Service RestartSec=100ms expired, scheduling restart.
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: microshift.service: Scheduled restart job, restart counter is at 34.
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: Stopped MicroShift.
Mar 23 06:24:05 microshift-ticket.kal.zc2.ibm.com systemd[1]: microshift.service: Consumed 398ms CPU time

[dhellmann]

I believe this is the same as #630. The fix (#1505) is merged into the 4.12 branch, but has not yet been released.

[kalloa]

Hi @dhellmann, thanks then I'll wait for the next release.

[dhellmann]

https://github.com/openshift/microshift/releases/tag/microshift-4.12.9 has been tagged and released.

[kalloa]

I can confirm that the new version starts normally, thank you.