Comments (5)
I managed to fix my cilium issues by tricking kube-hetnzer into reinstalling the Cilium CRDs (that is where the cilium pods were stuck at). In my case, I toggled the cilium egress gateway. Not sure this is feasible solution for you, as your terraform apply
is failing (but with some luck, Terraform reinstalls Cilium CRDs before it is hitting the issue you encounter).
from terraform-hcloud-kube-hetzner.
@byRoadrunner @bverhagen This was fixed in v2.11.5, but also using the kube.tf setup above, the control plane need to be at least cx21 as cpx11 with 2GB was not enough to allocate bpf memory for cilium, only +500MB was free and it was not enough, when you upgrade the node it works well, and this was only needed for the control-plane. Maybe with less options (like no smb etc). This was on top of the selinux issue.
from terraform-hcloud-kube-hetzner.
@mysticaltech : Thx! I use cax11 nodes for the control plane, so I can certainly live with that limitation!
from terraform-hcloud-kube-hetzner.
I am able to successfully run terraform apply
, but afterwards I have the same issue as @byRoadrunner , causing all pods to remain in Pending
state.
Yesterday this still worked for me. Last night's auto update resulted in this issue. (re-)creating nodes did not fix this.
from terraform-hcloud-kube-hetzner.
Ok, it's selinux. Working on a fix now.
sudo ausearch -m AVC
----
time->Fri Jan 5 23:03:02 2024
type=AVC msg=audit(1704495782.399:1158): avc: denied { map_create } for pid=3952 comm="cilium-operator" scontext=system_u:system_r:container_t:s0:c629,c815 tcontext=system_u:system_r:container_t:s0:c629,c815 tclass=bpf permissive=0
----
time->Fri Jan 5 23:03:06 2024
type=AVC msg=audit(1704495786.659:1167): avc: denied { map_create } for pid=4047 comm="cilium" scontext=system_u:system_r:container_t:s0:c709,c825 tcontext=system_u:system_r:container_t:s0:c709,c825 tclass=bpf permissive=0
from terraform-hcloud-kube-hetzner.
Related Issues (20)
- [Feature Request]: Add a note somewhere in the README that selinux enablement can lead to pods trying to use volumes with many files never booting
- [Bug]: (remote-exec): error: timed out waiting for the condition on deployments/system-upgrade-controller HOT 2
- Missing "cluster-init" option in config.yaml in the only control plane node. HOT 4
- [Bug]: Invalid provider configuration with terraform plan | apply HOT 2
- [Bug]: terraform validate fails "Names in agent_nodepools must be unique." HOT 2
- [Bug]: Autoupgrade nodes seems to lead to not ready nodes that need manual reboots HOT 8
- Longhorn installation fails (CRDs not installed) HOT 1
- Allow configuring s3 `etcd-snapshot-retention` in config file HOT 2
- System-upgrade-controller fails to run HOT 5
- [Bug]: Can't restore a copy HOT 2
- [Feature Request]: Collect extra-manifests recursive HOT 2
- [Bug]: Local Rancher Cluster mixed roles validation fails HOT 1
- [Bug]: HOT 1
- [Bug]: Terraform does not stop HOT 13
- [Bug]: ImagePullBackoff of system-upgrade controller HOT 1
- Not able to upgrade Traefik HOT 1
- [Bug]: Sudden drop of public internet connectivity for some nodes of arm64 cluster HOT 10
- [Bug]: zram_size not passed on HOT 4
- [Bug]: Terraform Validate fails agent_nodepools HOT 1
- [Bug]: Waiting for load-balancer to get an IP... Hangs HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from terraform-hcloud-kube-hetzner.