Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Silent hanging when collector / remover containers don't have access to CRI socket #1014

Open
1 task
pmengelbert opened this issue Apr 15, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@pmengelbert
Copy link
Contributor

Version of Eraser

1.3.1

Expected Behavior

If the collector and remover containers can't connect to the CRI socket due to a file permission error, there should be an immediate error and the collector should exit with a nonzero status code.

Actual Behavior

If eraser is built with, for example, the gcr.io/distroless/static:nonroot image as a base, the collector and remover will hang indefinitely at the CRI connection stage. A connection can't be made to the mounted unix CRI socket because the nonroot user does not have file permissions for the CRI socket. The permissions are 660.

Steps To Reproduce

No response

Are you willing to submit PRs to contribute to this bug fix?

  • Yes, I am willing to implement it.
@pmengelbert pmengelbert added the bug Something isn't working label Apr 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant