Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-2031

eBPF pods are in error state on OCP<=4.15

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Important
    • None
    • None
    • NetObserv - Sprint 264, NetObserv - Sprint 265
    • None
    • None
    • None

      Description of problem:

      eBPF pods are in CLBO state on OCP<=4.15

      Steps to Reproduce:

      1. Create an OCP cluster <=4.15
      2. Deploy NetObserv operator and flowcollector
      

      Actual results:

      All pods should come up fine

      Expected results:

      eBPF pods are in CLBO with error
      
      time="2025-01-02T20:36:05Z" level=info msg="starting NetObserv eBPF Agent [build version: unknown, build date: unknown]"
      time="2025-01-02T20:36:05Z" level=info msg="initializing Flows agent" component=agent.Flows
      time="2025-01-02T20:36:05Z" level=info msg="Verifier error: load program: permission denied:\n\t0: R1=ctx(off=0,imm=0) R10=fp0\n\t; return flow_monitor(skb, EGRESS);\n\t0: (b7) r2 = 1 ; R2_w=P1\n\t1: (85) call pc+2\n\tcaller:\n\t R10=fp0\n\tcallee:\n\t frame1: R1=ctx(off=0,imm=0) R2_w=P1 R10=fp0\n\t; static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {\n\t4: (bf) r6 = r2 ; frame1: R2_w=P1 R6_w=P1\n\t5: (bf) r9 = r1 ; frame1: R1=ctx(off=0,imm=0) R9_w=ctx(off=0,imm=0)\n\t; if (sampling > 1 && (bpf_get_prandom_u32() % sampling) != 0) {\n\t6: (18) r7 = 0xffff8a0524688110 ; frame1: R7_w=map_value(off=0,ks=4,vs=885,imm=0)\n\t8: (61) r1 = *(u32 *)(r7 +0) ; frame1: R1_w=P1 R7_w=map_value(off=0,ks=4,vs=885,imm=0)\n\t9: (b7) r2 = 2 ; frame1: R2_w=P2\n\t; if (sampling > 1 && (bpf_get_prandom_u32() % sampling) != 0) {\n\t10: (2d) if r2 > r1 goto pc+11 ; frame1: R1=P1 R2=P2\n\t; do_sampling =...
      time="2025-01-02T20:36:05Z" level=fatal msg="can't instantiate NetObserv eBPF Agent" error="loading and assigning BPF objects: field TcEgressFlowParse: program tc_egress_flow_parse: load program: permission denied: invalid indirect read from stack R3 off -224+18 size 56 (307 line(s) omitted)"

              mmahmoud@redhat.com Mohamed Mahmoud (Inactive)
              rhn-support-aramesha Amogh Rameshappa Devapura
              None
              None
              None
              Amogh Rameshappa Devapura Amogh Rameshappa Devapura
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: