tracee icon indicating copy to clipboard operation
tracee copied to clipboard

enrichment error message

Open josedonizetti opened this issue 1 year ago • 4 comments

I keep seem messages like when running on minikube. Not sure if they are a bug because the cgroup that they are trying to enrich isn't from a container. Thought it gives the wrong message to a user, it seems like something is not working. Does it make sense to keep logging them as errors? Maybe change the severity? Anything else?

{
    "level":"error",
    "ts":1708089649.258455,
    "msg":"error enriching container in control plane",
    "error":"containers.(*Containers).EnrichCgroupInfo: cgroup 74730: no containerId (path /user.slice/user-1000.slice/[email protected]/app.slice/snap.kubectl.kubectl-186be11b-11d3-462e-821c-83ce6d742804.scope)",
    "cgroup_id":74730
}

josedonizetti avatar Feb 19 '24 13:02 josedonizetti

@NDStrahilevitz WDYT?

josedonizetti avatar Feb 19 '24 13:02 josedonizetti

Seems to me there's a bug here, as this pattern should not match to a container but to a pod. So the log did its work in identifying the bug. I'll add this to the milestone and likely self assign later.

NDStrahilevitz avatar Feb 19 '24 13:02 NDStrahilevitz

@NDStrahilevitz AH, nice, so it is indeed a bug! Thank you

josedonizetti avatar Feb 19 '24 13:02 josedonizetti

@josedonizetti Can you try reproducing this? I got an error with the enrichment that the container doesn't exist (because I didn't manually setup the minikube dokcer socket), which means I did get the container id, unlike your case. Maybe different minikube versions?

minikube version: v1.33.1
commit: 5883c09216182566a63dff4c326a6fc9ed2982ff

NDStrahilevitz avatar Jul 02 '24 07:07 NDStrahilevitz