Open iarlyy opened 5 months ago
@iarlyy Thanks for raising the issue. We have encountered this when init
container fails to create the pinned map the log mentions. Can you update us with the following information:
init
container logsbpftool map | grep retina
resultlogs from one of the init-retina
containers:
ts=2024-06-17T09:23:40.651Z level=info caller=bpf/setup_linux.go:61 msg="BPF filesystem mounted successfully" version=v0.0.12 path=/sys/fs/bpf
ts=2024-06-17T09:23:40.651Z level=info caller=bpf/setup_linux.go:68 msg="Deleted existing filter map file" version=v0.0.12 path=/sys/fs/bpf Map name=retina_filter_map
ts=2024-06-17T09:23:40.652Z level=info caller=bpf/setup_linux.go:76 msg="Filter map initialized successfully" version=v0.0.12 path=/sys/fs/bpf Map name=retina_filter_map
I will install bpftool in one of the nodes to collect the requested information.
@anubhabMajumdar is there an alternative way to get this information? I am just unable to compile bpftool.
my bad, runAsUser
attribute and BPF,PERFMON (not sure if those are needed) capabilities were missing.
securityContext:
runAsUser: 0
capabilities:
add:
- SYS_ADMIN
- SYS_RESOURCE
- NET_ADMIN
- IPC_LOCK
- BPF
- PERFMON
I'm going to reopen this since we should probably be adding those capabilities to the manifests if they're not getting added. Otherwise, we should document that there are additional steps required. Thanks for your investigation @iarlyy !
Describe the bug retina-agent fails to start and crashes with the following error:
To Reproduce Steps to reproduce the behavior:
Installation command:
It seems some issue with pod level toggle. If i set it to false, pods start normally.
Expected behavior Clean initialization of retina-agent pods.
Platform (please complete the following information):
Thanks for any light in figuring it out what is happening.