chroot error on start es pod

[AdamWyzgol]

I just install wazuh on new kubernetes cluster, on ES I have in logs error:
chroot: cannot change root directory to /: Operation not permitted
This occures only on this pod, I tried also older versions of image, there was the same problem. Where could be the issue?

[AdamWyzgol]

after adding to container definition:
securityContext:
runAsUser: 1000
it starts working, the same problem I had after changed image to base elasticsearch image. I foud that resolution after read this elastic/helm-charts#357 (comment) maybe it help someone.

[xr09]

Hi @AdamWyzgol,

I'm trying to emulate this error. Could you share more details about your Kubernetes environment (minikube, EKS, GKE, etc) and the exact steps you followed for the deployment?

[AdamWyzgol]

I have some more details, the same error occure on manager pods. I think it could be related with CRI-o based cluster. It is custom installation from kubeadm, latest version of k8s and crio. All is based on CentOS 8, SeLinux is enabled but disabling it give the same result.

[AdamWyzgol]

I found this opendistro-for-elasticsearch/opendistro-build#167 it is probalby the issue when apply this fix it works

[xr09]

Thanks for the PR we'll give it a look soon.

[xr09]

Fixed by #113