Skip to content

feat(fips): Fix Dropreason plugin in FIPS #1499

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

anubhabMajumdar
Copy link
Contributor

Description

In FIPs complient *nix nodes, dropreason plugin was failing to install. Also, the rlimit command fails to run due to insufficient permission. This PR fixes the dropreason plugin and adds the necessary permission to run the rlimit command

Related Issue

#1439

Checklist

  • I have read the contributing documentation.
  • I signed and signed-off the commits (git commit -S -s ...). See this documentation on signing commits.
  • I have correctly attributed the author(s) of the code.
  • I have tested the changes locally.
  • I have followed the project's style guidelines.
  • I have updated the documentation, if necessary.
  • I have added tests, if applicable.

Screenshots (if applicable) or Testing Completed

Please add any relevant screenshots or GIFs to showcase the changes made.

Additional Notes

Add any additional notes or context about the pull request here.


Please refer to the CONTRIBUTING.md file for more information on how to contribute to this project.

@anubhabMajumdar anubhabMajumdar requested a review from a team as a code owner April 1, 2025 19:27
@anubhabMajumdar anubhabMajumdar linked an issue Apr 1, 2025 that may be closed by this pull request
dr.l.Warn("inet_csk_accept not found, skipping attaching kretprobe to it. This may impact the drop reason metrics.")
} else {
dr.l.Error("opening kretprobe: %w", zap.Error(err))
return err
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need sth like this to address the error linter issue:
return fmt.Errorf("Failed to attach program: %w", err) //nolint:goerr113 //wrapping error from external module

if you wrap the error as it asks, and is good practice, you'll get an error from a different linter, whihch is a false positive; i faced this in another PR

Copy link

This PR will be closed in 7 days due to inactivity.

@github-actions github-actions bot added the meta/waiting-for-author Blocked and waiting on the author label May 22, 2025
@rectified95
Copy link
Contributor

Superseded by #1600

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
meta/waiting-for-author Blocked and waiting on the author
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Retina agent pods crash looping after node upgrade (AKS)
2 participants