microsoft / microsoft/retina

[Helm] Missing CAP_BPF in retina-agent Daemonset spec

Open
#2,236 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
3.2k
Forks
304
Avg merge
1d 19h
Merged PRs (30d)
78

Description

**Describe the bug**
The linuxutil and packetforward plugins (which are enabled by default in the basic setup instructions) require the CAP_BPF kernel capability. However this seems to be missing from the default set of capabilities added in the Helm chart:

- https://github.com/microsoft/retina/blob/main/deploy/standard/manifests/controller/helm/retina/templates/daemonset.yaml#L110-L115
- https://github.com/microsoft/retina/blob/main/deploy/standard/manifests/controller/helm/retina/values.yaml#L140-L147

As a result, the agent errors out being unable to retrieve any metrics from any of the present interfaces.

**To Reproduce**
Steps to reproduce the behavior:

1. Install retina-agent via the Helm chart.
2. Observe that the daemonset and pods lack the CAP_BPF capability.
3. Observe that the agent cannot retrieve any interface metrics.

**Expected behavior**
BPF is added to the default set of capabilities in the Helm chart.

**Screenshots**
N/A

**Platform (please complete the following information):**

- OS: Amazon Linux 2
- Kubernetes Version: EKS 1.34
- Host: AWS EC2 instances
- Retina Version: 1.20

**Additional context**
Add any other context about the problem here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.