Reconcile fails for vsphere-pv-csi.tanzu.vmware.com package with the Error (see .status.usefulErrorMessage for details)

Products

• Tanzu Kubernetes Runtime

Issue/Introduction

• Upon describing the pkgi, following error message is seen :
  kapp: Error: Timed out waiting after 30s for resources: [daemonset/vsphere-csi-node (apps/v1) namespace: vmware-system-csi]
  
  
• Verifying the events of the namespace shows the following error :
  FailedCreate   replicaset/<pod_name>   Error creating: pods "<pod_name>" is forbidden: violates PodSecurity "restricted:latest": seccompProfile (pod or container "dynatrace-operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

Environment

vSphere Kubernetes Service 

Cause

The issue is caused by the Dynatrace operator's pod security context with the cluster's current security standards (restricted:latest).

Resolution

Perform a rollout restart of the Dynatrace operator deployment using the following command:

kubectl rollout restart deployment <deployment_name> -n <namespace>