[Helm] Missing CAP_BPF in retina-agent Daemonset spec
- Dominant language
- Go
- Stars
- 3.2k
- Forks
- 304
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 78
Description
**Describe the bug**
The linuxutil and packetforward plugins (which are enabled by default in the basic setup instructions) require the CAP_BPF kernel capability. However this seems to be missing from the default set of capabilities added in the Helm chart:
- https://github.com/microsoft/retina/blob/main/deploy/standard/manifests/controller/helm/retina/templates/daemonset.yaml#L110-L115
- https://github.com/microsoft/retina/blob/main/deploy/standard/manifests/controller/helm/retina/values.yaml#L140-L147
As a result, the agent errors out being unable to retrieve any metrics from any of the present interfaces.
**To Reproduce**
Steps to reproduce the behavior:
1. Install retina-agent via the Helm chart.
2. Observe that the daemonset and pods lack the CAP_BPF capability.
3. Observe that the agent cannot retrieve any interface metrics.
**Expected behavior**
BPF is added to the default set of capabilities in the Helm chart.
**Screenshots**
N/A
**Platform (please complete the following information):**
- OS: Amazon Linux 2
- Kubernetes Version: EKS 1.34
- Host: AWS EC2 instances
- Retina Version: 1.20
**Additional context**
Add any other context about the problem here.
Contributor guide
Assessment
This issue has not been assessed yet.