# Error: Capset failed: Operation not permitted - not privileged AWX in OpenShift **URL:** \ **Category:** AWX Project\ **Tags:** kubernetes, awx\ **Created:** [December 12, 2018, 5:49pm UTC](https://forum.ansible.com/t/error-capset-failed-operation-not-permitted-not-privileged-awx-in-openshift/29248 "2018-12-12T17:49:28Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Mauro\_Aragunde](https://avatars.discourse-cdn.com/v4/letter/m/c68b51/32.png) [@Mauro\_Aragunde](https://forum.ansible.com/u/Mauro_Aragunde)\ **Post date:** [December 12, 2018, 5:49pm UTC](https://forum.ansible.com/t/error-capset-failed-operation-not-permitted-not-privileged-awx-in-openshift/29248/1 "2018-12-12T17:49:28Z")
Hello Folks, In my team we have been working to install AWX in the OpenShift instance, and now that we were able to install it, we are getting the following error when executing a playbook (for example the SCM update) 1 Identity added: /tmp/awx\_15\_c3yztD/credential\_2 (/tmp/awx\_15\_c3yztD/credential\_2) **2 bwrap: capset failed: Operation not permitted** As we are not allowed to add a privileged user or to run process as root in the containers we had to do 2 modifications to the installation playbook: 1. Remove this task from “awx/installer/roles/kubernetes/tasks/openshift.yml”: > # - name: Add privileged SCC to service account > > # shell: | > > # {{ openshift\_oc\_bin }} adm policy add-scc-to-user privileged system:serviceaccount:{{ openshift\_project }}:awx 1. Put privileged: false in the security context of the deployment template “awx/installer/roles/kubernetes/templates/deployment.yml.j2” … - name: {{ kubernetes\_deployment\_name }}-celery securityContext: privileged: **false** image: “{{ kubernetes\_task\_image }}:{{ kubernetes\_task\_version }}” command:… … If we do a ps -aux inside the celery container, we can see that all the process are started by the user “awx” that belongs to the group 0 root. Attached are the logs of awx-celery & image of ps -aux **Do you know if this error is related with the modifications that were done?** **Is there a way to have it working without root ?** Thanks a lot for your help! > **(attachments)** > > [awx-0 (2).log](https://forum.ansible.com/uploads/short-url/1zu0hlfDdRgWuk8d9g7H50JKBNf.log) (20.9 KB) > > ![psaux awx.PNG](https://us1.discourse-cdn.com/ansible/original/2X/f/fcf7ca9c3ad170175d2e6b7a148f1c0bd498c183.png)