Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[heartbeat] Stop using cap_net_raw for docker image #28685

Closed
andrewvc opened this issue Oct 27, 2021 · 3 comments
Closed

[heartbeat] Stop using cap_net_raw for docker image #28685

andrewvc opened this issue Oct 27, 2021 · 3 comments
Assignees
@andrewvc
Labels
bug Team:obs-ds-hosted-services Label for the Observability Hosted Services team v8.0.0

Comments

@andrewvc
Copy link
Contributor

andrewvc commented Oct 27, 2021 •
edited
Loading

The heartbeat docker image will not run in docker/k8s if all capabilities are dropped (if you use --cap-drop with docker you'll see this). We stopped doing this for agent in #28504 and should probably do the same for heartbeat here since it's so confusing in terms of behavior.

Alternatively, if we can find a way to fail gracefully that would be fine. Ideally if no capabilities were set the binary would just run without those capabilities instead of failing.
@andrewvc andrewvc self-assigned this Oct 27, 2021
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Oct 27, 2021
@andrewvc andrewvc changed the title [heartbeat] Document requirement to add cap_net_raw for docker image [heartbeat] Stop using cap_net_raw for docker image Oct 27, 2021
@andrewvc andrewvc added the Team:obs-ds-hosted-services Label for the Observability Hosted Services team label Oct 27, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/uptime (Team:Uptime)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Oct 27, 2021
@paulb-elastic
Copy link
Contributor

Pushing to 8.0

@andrewvc
Copy link
Contributor Author

Closing in favor of #27651 and #30200

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrewvc andrewvc

Labels
bug Team:obs-ds-hosted-services Label for the Observability Hosted Services team v8.0.0
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@andrewvc @elasticmachine @paulb-elastic