HPE Ezmeral issue on Kubernetes node

[Andrii_D]

Hello, team.

I'm QA engineer and I'm working on installation of HPE Ezmeral 5.6. 

We are blocked with an issue on Kubernetes node and can't continue with installation.

The issue exists on troubleshooting page, but the solution doesn't work (or we do something wrong).

Checking falco kernel module: FAILED.

Falco kernel module schema_version must be in the 2.1 range.

If  we look into the falco module info with the command modinfo falco we get the following:

filename:       /lib/modules/3.10.0-1160.108.1.el7.x86_64/falco.ko

schema_version: 2.14.0

api_version:    8.0.1

build_commit:   7.0.0+driver

version:        7.0.0+driver

author:         the Falco authors

license:        Dual MIT/GPL

retpoline:      Y

rhelversion:    7.9

srcversion:     E360734CB06BC0B310A90D0

depends:

vermagic:       3.10.0-1160.108.1.el7.x86_64 SMP mod_unload modversions

parm:           g_buffer_bytes_dim:This is the dimension of a single per-CPU buffer in bytes. Please note: this buffer will be mapped twice in the process virtual memory, so pay attention to its size.

parm:           max_consumers:Maximum number of consumers that can simultaneously open the devices (uint)

parm:           verbose:Enable verbose logging (bool)

So the schema version is 2.14.0 - maybe this is causing the error as the message printed in the prechecks logs is that "schema_version range must be in 2.1 range"? From our perspective "2.14.0" version meets the requirements to "2.1"v.

Either our module is newer and ezmeral does not support it. Or the schema is right but there is an error with ezmeral prechecks.

Could you help us with the solution of this issue?

[support_s]

System recommended content:

1. HPE Ezmeral Runtime Enterprise 5.5 Documentation | Kubernetes Node Issues

2. Ezmeral Runtime and Ezmeral Container Platform - Kubernetes Cluster creation on RHEL 8 hosts requires the ip_tables kernel module to be loaded

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[Shishir_Prakash]

Can you follow below doc and make sure the falco module is compaitible. 

https://docs.ezmeral.hpe.com/runtime-enterprise/56/reference/kubernetes/kubernetes-administrator/clusters/cluster-add-ons/Falco_Container_Security.html

Please refer the below public Falco documentation for instalation.

https://falco.org/docs/install-operate/installation/

[Abe-S]

Hi Andrii,

Yes, you do need to install a version of Falco that has schema version 2.1 (not anything greater, such as the 2.14 you have).

Falco 0.30 has the correct APU schema:

yum install -y falco-0.30.0-1

Please install that same version to proceed with your ERE installation,

Best regards

Abe

[Andrii_D]

@Abe-S Hello, Abe.

Thanks for the hints. Installation of falco 0.30 didn't resolve our issue, but we continued to search in this direction and found that Falco v0.33.1 helped to overcome original issue.

Regards,

Andrii.

[Andrii_D]

We faced with another error so I opened a new ticket:
https://community.hpe.com/t5/hpe-ezmeral-software-platform/hpe-ezmeral-quot-internal-error-quot-on-kubernetes-node/td-p/7207644