Comments (5)
I managed to fix my cilium issues by tricking kube-hetnzer into reinstalling the Cilium CRDs (that is where the cilium pods were stuck at). In my case, I toggled the cilium egress gateway. Not sure this is feasible solution for you, as your terraform apply
is failing (but with some luck, Terraform reinstalls Cilium CRDs before it is hitting the issue you encounter).
from terraform-hcloud-kube-hetzner.
@byRoadrunner @bverhagen This was fixed in v2.11.5, but also using the kube.tf setup above, the control plane need to be at least cx21 as cpx11 with 2GB was not enough to allocate bpf memory for cilium, only +500MB was free and it was not enough, when you upgrade the node it works well, and this was only needed for the control-plane. Maybe with less options (like no smb etc). This was on top of the selinux issue.
from terraform-hcloud-kube-hetzner.
@mysticaltech : Thx! I use cax11 nodes for the control plane, so I can certainly live with that limitation!
from terraform-hcloud-kube-hetzner.
I am able to successfully run terraform apply
, but afterwards I have the same issue as @byRoadrunner , causing all pods to remain in Pending
state.
Yesterday this still worked for me. Last night's auto update resulted in this issue. (re-)creating nodes did not fix this.
from terraform-hcloud-kube-hetzner.
Ok, it's selinux. Working on a fix now.
sudo ausearch -m AVC
----
time->Fri Jan 5 23:03:02 2024
type=AVC msg=audit(1704495782.399:1158): avc: denied { map_create } for pid=3952 comm="cilium-operator" scontext=system_u:system_r:container_t:s0:c629,c815 tcontext=system_u:system_r:container_t:s0:c629,c815 tclass=bpf permissive=0
----
time->Fri Jan 5 23:03:06 2024
type=AVC msg=audit(1704495786.659:1167): avc: denied { map_create } for pid=4047 comm="cilium" scontext=system_u:system_r:container_t:s0:c709,c825 tcontext=system_u:system_r:container_t:s0:c709,c825 tclass=bpf permissive=0
from terraform-hcloud-kube-hetzner.
Related Issues (20)
- Not able to upgrade Traefik HOT 1
- [Bug]: Sudden drop of public internet connectivity for some nodes of arm64 cluster HOT 10
- [Bug]: zram_size not passed on HOT 4
- [Bug]: Terraform Validate fails agent_nodepools HOT 1
- [Bug]: Waiting for load-balancer to get an IP... Hangs HOT 2
- Disable the default load balancer HOT 7
- [Bug]: nginx stuck deploying when not scheduling on control-plane
- Upgrading a clean cluster 1.27 to 1.28 - one of the nodes stuck in emergency mode HOT 1
- Update `cluster-autoscaler` version HOT 4
- Restore hangs waiting for load balancer ip HOT 2
- Allow specifying an existing Floating IP HOT 3
- [Bug]: Disabling SELINUX option is not working HOT 3
- Solution for multiple networks for nodes
- [Bug]: image pull backoff error with latest: hetznercloud/hcloud-csi-driver:v2.7.0 HOT 2
- On GitLab, waiting for MicroOS to become available HOT 5
- [Bug]: /etc/cloud/rename_interface.sh: No such file or directory HOT 7
- [Bug]: helm releases keep installing after disabling them in kube.tf HOT 3
- [Bug]: Terraform does not deploy well HOT 2
- Allow patching default Helm values HOT 1
- Unknown connection HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from terraform-hcloud-kube-hetzner.