Skip to content

Falcon-sensor init container fails on ipv6 clusters #503

@dawid-remitly

Description

@dawid-remitly

Installing falcon-sensor helm chart in version 1.34.2 results in this error:

> k logs falcon-sensor-cmpx2 -c init-falconstore
Running /opt/CrowdStrike/falcon-daemonset-init -i
Setting up CrowdStrike directory
Created directory /opt/CrowdStrike
Created /opt/CrowdStrike/falconstore
Running /opt/CrowdStrike/configure-cluster-id
Found Service Host
Found node name
Found Certificate
Found Access token
Error sending request: Get "https://fda1:5099:ee66::1/api/v1/namespaces/kube-system": dial tcp: lookup fda1:5099:ee66:: no such host
Failed to query K8S API: Get "https://fda1:5099:ee66::1/api/v1/namespaces/kube-system": dial tcp: lookup fda1:5099:ee66:: no such host
cluster ID environment variable not set clusterId:  nodeUID:

as a temporal workaround this kustomize patch works:

kind: DaemonSet
apiVersion: apps/v1
metadata:
  name: falcon-sensor
  namespace: falcon-system
spec:
  template:
    spec:
      initContainers:
      - name: init-falconstore
        env:
        - name: KUBERNETES_SERVICE_HOST
          value: kubernetes.default.svc.cluster.local

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions