kubescape / kubescape/node-agent

Host sensor warns continuously when kube-proxy is intentionally absent

Open
#962 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
37
Forks
28
Avg merge
23h 31m
Merged PRs (30d)
29

Description

What happened?

On a Kubernetes cluster that deliberately runs without kube-proxy (Cilium kube-proxy replacement), enabling the node-agent host sensor emits this warning on every host-sensor interval:

sensor failed kind=KubeProxyInfo error="failed to sense data: failed to locate kube-proxy process: ..."

This is an expected cluster state rather than a sensor failure. The warning creates recurring operational noise and makes warning-based health views less actionable.

Why it happens

NewHostSensorManager unconditionally includes NewKubeProxyInfoSensor whenever host sensing is enabled. KubeProxyInfoSensor.Sense returns an error when it cannot locate the kube-proxy process. The same behavior is present in v0.3.142 and current main.

There is currently one switch for the complete host-sensor manager, so an operator cannot suppress only this inapplicable sensor without also losing OS, kernel, kubelet, open-port, hardening, and CNI data.

Requested behavior

Please support kube-proxy-free clusters without a recurring warning. Either of these contracts would work:

  1. Treat an absent kube-proxy process as a supported empty/not-applicable result; or
  2. Add a per-sensor exclusion list so operators can disable KubeProxyInfo while retaining the other host sensors.

The first option seems preferable when kube-proxy replacement can be detected reliably. A test should cover a host with no kube-proxy process and prove the periodic sensing loop remains warning-free while the other sensors still run.

Versions checked
  • node-agent v0.3.142
  • current main as of 2026-09-08

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with NewHostSensorManager and NewKubeProxyInfoSensor, then follow KubeProxyInfoSensor.Sense into the periodic host-sensing loop. Check how other sensors report empty or not-applicable results and determine which requested contract fits. Done means a host without kube-proxy produces no recurring warning while the other host sensors continue running, with a test covering that case.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure, observability
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.