Столкновение с ошибкой crashloopback при попытке установить falco
Пытался установить falco с помощью helm. Когда я проверил свои поды с помощью kubectl get pods, мои стручки Falco показывают ошибку crashloopbackoff. Когда я проверил мои события с помощью kubectl describe pod, он показывает следующее:
Name: falco-xvjv8
Namespace: default
Priority: 0
Node: minikube/192.168.49.2
Start Time: Mon, 30 Aug 2021 14:16:19 +0530
Labels: app=falco
controller-revision-hash=657444bc8
pod-template-generation=1
role=security
Annotations: checksum/certs: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
checksum/config: b3e7235ffa87a7967af2b7acfb01e2f827cc2f50b18c466f64c6bb64b386244b
checksum/rules: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
Status: Running
IP: 172.17.0.2
IPs:
IP: 172.17.0.2
Controlled By: DaemonSet/falco
Containers:
falco:
Container ID: docker://13612f380312475a98855f99e68397e8d2bcd33f42b8cae31af3dbc2a01a8d4f
Image: docker.io/falcosecurity/falco:0.29.1
Image ID: docker-pullable://falcosecurity/falco@sha256:626eb862a90e2935417a4e523562e009c0d710af1fa0877eda065cae5ed19817
Port: <none>
Host Port: <none>
Args:
/usr/bin/falco
--cri
/run/containerd/containerd.sock
-K
/var/run/secrets/kubernetes.io/serviceaccount/token
-k
https://$(KUBERNETES_SERVICE_HOST)
-pk
State: Waiting
Reason: CrashLoopBackOff
Last State: Terminated
Reason: Error
Exit Code: 1
Started: Mon, 30 Aug 2021 14:17:19 +0530
Finished: Mon, 30 Aug 2021 14:17:20 +0530
Ready: False
Restart Count: 3
Limits:
cpu: 1
memory: 1Gi
Requests:
cpu: 100m
memory: 512Mi
Liveness: http-get http://:8765/healthz delay=60s timeout=5s period=15s #success=1 #failure=3
Readiness: http-get http://:8765/healthz delay=30s timeout=5s period=15s #success=1 #failure=3
Environment: <none>
Mounts:
/etc/falco from config-volume (rw)
/host/boot from boot-fs (ro)
/host/dev from dev-fs (ro)
/host/etc from etc-fs (ro)
/host/lib/modules from lib-modules (rw)
/host/proc from proc-fs (ro)
/host/run/containerd/containerd.sock from containerd-socket (rw)
/host/usr from usr-fs (ro)
/host/var/run/docker.sock from docker-socket (rw)
/var/run/secrets/kubernetes.io/serviceaccount from falco-token-jssjc (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
docker-socket:
Type: HostPath (bare host directory volume)
Path: /var/run/docker.sock
HostPathType:
containerd-socket:
Type: HostPath (bare host directory volume)
Path: /run/containerd/containerd.sock
HostPathType:
dev-fs:
Type: HostPath (bare host directory volume)
Path: /dev
HostPathType:
proc-fs:
Type: HostPath (bare host directory volume)
Path: /proc
HostPathType:
boot-fs:
Type: HostPath (bare host directory volume)
Path: /boot
HostPathType:
lib-modules:
Type: HostPath (bare host directory volume)
Path: /lib/modules
HostPathType:
usr-fs:
Type: HostPath (bare host directory volume)
Path: /usr
HostPathType:
etc-fs:
Type: HostPath (bare host directory volume)
Path: /etc
HostPathType:
config-volume:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: falco
Optional: false
falco-token-jssjc:
Type: Secret (a volume populated by a Secret)
SecretName: falco-token-jssjc
Optional: false
QoS Class: Burstable
Node-Selectors: <none>
Tolerations: node-role.kubernetes.io/master:NoSchedule
node.kubernetes.io/disk-pressure:NoSchedule op=Exists
node.kubernetes.io/memory-pressure:NoSchedule op=Exists
node.kubernetes.io/not-ready:NoExecute op=Exists
node.kubernetes.io/pid-pressure:NoSchedule op=Exists
node.kubernetes.io/unreachable:NoExecute op=Exists
node.kubernetes.io/unschedulable:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 85s default-scheduler Successfully assigned default/falco-xvjv8 to minikube
Normal Pulled 26s (x4 over 76s) kubelet Container image "docker.io/falcosecurity/falco:0.29.1" already present on machine
Normal Created 24s (x4 over 75s) kubelet Created container falco
Normal Started 24s (x4 over 74s) kubelet Started container falco
Warning BackOff 7s (x11 over 68s) kubelet Back-off restarting failed container
Я долго застревал с этой ошибкой. В чем может быть причина этой ошибки?