-
Bug
-
Resolution: Done
-
Major
-
netobserv-1.8-candidate
-
Quality / Stability / Reliability
-
False
-
-
None
-
Important
-
None
-
None
-
NetObserv - Sprint 264, NetObserv - Sprint 265
-
None
-
None
-
None
Description of problem:
eBPF pods are in CLBO state on OCP<=4.15
Steps to Reproduce:
1. Create an OCP cluster <=4.15 2. Deploy NetObserv operator and flowcollector
Actual results:
All pods should come up fine
Expected results:
eBPF pods are in CLBO with error time="2025-01-02T20:36:05Z" level=info msg="starting NetObserv eBPF Agent [build version: unknown, build date: unknown]" time="2025-01-02T20:36:05Z" level=info msg="initializing Flows agent" component=agent.Flows time="2025-01-02T20:36:05Z" level=info msg="Verifier error: load program: permission denied:\n\t0: R1=ctx(off=0,imm=0) R10=fp0\n\t; return flow_monitor(skb, EGRESS);\n\t0: (b7) r2 = 1 ; R2_w=P1\n\t1: (85) call pc+2\n\tcaller:\n\t R10=fp0\n\tcallee:\n\t frame1: R1=ctx(off=0,imm=0) R2_w=P1 R10=fp0\n\t; static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {\n\t4: (bf) r6 = r2 ; frame1: R2_w=P1 R6_w=P1\n\t5: (bf) r9 = r1 ; frame1: R1=ctx(off=0,imm=0) R9_w=ctx(off=0,imm=0)\n\t; if (sampling > 1 && (bpf_get_prandom_u32() % sampling) != 0) {\n\t6: (18) r7 = 0xffff8a0524688110 ; frame1: R7_w=map_value(off=0,ks=4,vs=885,imm=0)\n\t8: (61) r1 = *(u32 *)(r7 +0) ; frame1: R1_w=P1 R7_w=map_value(off=0,ks=4,vs=885,imm=0)\n\t9: (b7) r2 = 2 ; frame1: R2_w=P2\n\t; if (sampling > 1 && (bpf_get_prandom_u32() % sampling) != 0) {\n\t10: (2d) if r2 > r1 goto pc+11 ; frame1: R1=P1 R2=P2\n\t; do_sampling =... time="2025-01-02T20:36:05Z" level=fatal msg="can't instantiate NetObserv eBPF Agent" error="loading and assigning BPF objects: field TcEgressFlowParse: program tc_egress_flow_parse: load program: permission denied: invalid indirect read from stack R3 off -224+18 size 56 (307 line(s) omitted)"
- links to
(1 links to)