Giter VIP home page Giter VIP logo

Comments (5)

bverhagen avatar bverhagen commented on June 16, 2024 1

I managed to fix my cilium issues by tricking kube-hetnzer into reinstalling the Cilium CRDs (that is where the cilium pods were stuck at). In my case, I toggled the cilium egress gateway. Not sure this is feasible solution for you, as your terraform apply is failing (but with some luck, Terraform reinstalls Cilium CRDs before it is hitting the issue you encounter).

from terraform-hcloud-kube-hetzner.

mysticaltech avatar mysticaltech commented on June 16, 2024 1

@byRoadrunner @bverhagen This was fixed in v2.11.5, but also using the kube.tf setup above, the control plane need to be at least cx21 as cpx11 with 2GB was not enough to allocate bpf memory for cilium, only +500MB was free and it was not enough, when you upgrade the node it works well, and this was only needed for the control-plane. Maybe with less options (like no smb etc). This was on top of the selinux issue.

from terraform-hcloud-kube-hetzner.

bverhagen avatar bverhagen commented on June 16, 2024 1

@mysticaltech : Thx! I use cax11 nodes for the control plane, so I can certainly live with that limitation!

from terraform-hcloud-kube-hetzner.

bverhagen avatar bverhagen commented on June 16, 2024

I am able to successfully run terraform apply, but afterwards I have the same issue as @byRoadrunner , causing all pods to remain in Pending state.

Yesterday this still worked for me. Last night's auto update resulted in this issue. (re-)creating nodes did not fix this.

from terraform-hcloud-kube-hetzner.

mysticaltech avatar mysticaltech commented on June 16, 2024

Ok, it's selinux. Working on a fix now.

sudo ausearch -m AVC
----
time->Fri Jan  5 23:03:02 2024
type=AVC msg=audit(1704495782.399:1158): avc:  denied  { map_create } for  pid=3952 comm="cilium-operator" scontext=system_u:system_r:container_t:s0:c629,c815 tcontext=system_u:system_r:container_t:s0:c629,c815 tclass=bpf permissive=0
----
time->Fri Jan  5 23:03:06 2024
type=AVC msg=audit(1704495786.659:1167): avc:  denied  { map_create } for  pid=4047 comm="cilium" scontext=system_u:system_r:container_t:s0:c709,c825 tcontext=system_u:system_r:container_t:s0:c709,c825 tclass=bpf permissive=0

from terraform-hcloud-kube-hetzner.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.