Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-2178

Improve warning messages on missing privileged mode for eBPF features that require it

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • netobserv-1.9
    • netobserv-1.8
    • eBPF
    • None
    • False
    • None
    • False
    • Hide
      Previously, some of the warnings sent from the operator validation webhook could lack clarity, such as when not mentioning exactly which feature causes the warning, or what needed to be done.
      Some of these messages have been reviewed and amended to make them more actionable.
      Show
      Previously, some of the warnings sent from the operator validation webhook could lack clarity, such as when not mentioning exactly which feature causes the warning, or what needed to be done. Some of these messages have been reviewed and amended to make them more actionable.
    • NetObserv - Sprint 270, NetObserv - Sprint 272
    • Moderate

      Certain eBPF features require privileged mode.  If the user selects any one of them (e.g. UDNMapping), then privileged mode should be automatically enabled.  If there are concerns about doing this, then it should minimally flag this as an error as opposed to just not working and having the user figure out what's wrong.

       

      Additional Note (joel): it has always been intentional to ask it as an explicit configuration, because setting the privileged mode does weaken the security.

      So, the goal here would be to make sure it is correctly handle in the validation hook to help users understand what they're missing (I thought it was done already, so, to be verified)

              jtakvori Joel Takvorian
              stlee@redhat.com Steven Lee
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: