-
Notifications
You must be signed in to change notification settings - Fork 5.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[prometheus-blackbox-exporter] ICMP: Suggest setting net.ipv4.ping_group_range
in podSecurityContext
#3616
base: main
Are you sure you want to change the base?
Conversation
Add hint to set `net.ipv4.ping_group_range` Signed-off-by: Jan Ulferts <jan@janulferts.de>
net.ipv4.ping_group_range
in podSecurityContext
net.ipv4.ping_group_range
in podSecurityContext
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
some text should be added why its needed and maybe in which environments.
also chart version needs to be updated.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
chart version needs to be updated
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions. |
This seems possibly related to cri-o. I ran into this issue with k8s 1.29 on cri-o/Ubuntu 22.04 https://github.com/cri-o/cri-o/blob/main/docs/crio.conf.5.md This could also possibly be related to user namespaces https://frasertweedale.github.io/blog-redhat/posts/2020-12-01-openshift-crio-userns.html |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions. |
What this PR does / why we need it
To enable ICMP probes
net.ipv4.ping_group_range
must be set in some environments.This PR adds a hint to the release notes aside of the hint to set
securityContext.capabilities.add: ["NET_RAW"]
for enabling ICMP.This will IMO make it easier for users to get ICMP probes working
Which issue this PR fixes
(optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)
format, will close that issue when PR gets merged)Special notes for your reviewer
Checklist
[prometheus-couchdb-exporter]
)