unknown object type "nil" in ConfigMap.data.enable-ancestors

[zer0-1s]

What happened? How can we reproduce this?

vagrant@master:~$ helm version
version.BuildInfo{Version:"v3.19.0", GitCommit:"3d8990f0836691f0229297773f3524598f46bda6", GitTreeState:"clean", GoVersion:"go1.24.7"}

vagrant@master:~$ helm search repo cilium/tetragon
NAME            CHART VERSION   APP VERSION     DESCRIPTION            
cilium/tetragon 1.5.0           1.5.0           Helm chart for Tetragon

vagrant@master:~$ helm install tetragon cilium/tetragon -n kube-system --create-namespace   --set tetragon.enablePolicyDeny=true
Error: INSTALLATION FAILED: unable to build kubernetes objects from release manifest: error validating "": error validating data: unknown object type "nil" in ConfigMap.data.enable-ancestors

Tetragon Version

NAME CHART VERSION APP VERSION DESCRIPTION
cilium/tetragon 1.5.0 1.5.0 Helm chart for Tetragon

Kernel Version

vagrant@master:~$ uname -a Linux master 4.15.0-212-generic #223-Ubuntu SMP Tue May 23 13:09:22 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Kubernetes Version

No response

Bugtool

No response

Relevant log output

Anything else?

No response

[mtardy]

Can you show us the ConfigMap in question. It seems you have an object instead of a boolean at enable-ancestors but seeing the value will make it clearer

validating data: unknown object type "nil" in ConfigMap.data.enable-ancestors

[zer0-1s]

vagrant@master:~$ cat values.yaml  | grep "ancestors"
  # -- Tetragon puts processes in an LRU cache. The cache is used to find ancestors
    # -- Comma-separated list of process event types to enable ancestors for.
    # Set it to "" to disable ancestors completely.
vagrant@master:~$ nano values.yaml 
vagrant@master:~$ nano values.yaml 
vagrant@master:~$ helm install tetragon cilium/tetragon -n kube-system -f values.yaml
Error: INSTALLATION FAILED: unable to build kubernetes objects from release manifest: error validating "": error validating data: unknown object type "nil" in ConfigMap.data.enable-ancestors
vagrant@master:~$ cat -n values.yaml | grep -A5 ancestors
    61    # -- Tetragon puts processes in an LRU cache. The cache is used to find ancestors
    62    # for subsequently exec'ed processes.
    63    processCacheSize: 65536
    64    # -- If you want to run Tetragon in debug mode change this value to true
    65    debug: false
    66    # -- JSON export filename. Set it to an empty string to disable JSON export altogether.
--
   153      # -- Comma-separated list of process event types to enable ancestors for.
   154      # Supported event types are: base, kprobe, tracepoint, uprobe, lsm. Unknown event types will be ignored.
   155      # Type "base" is required by all other supported event types for correct reference counting.
   156      # Set it to "" to disable ancestors completely.
   157      enabled: ""
   158    # -- Set --btf option to explicitly specify an absolute path to a btf file. For advanced users only.
   159    btf: ""
   160    # -- Override the command. For advanced users only.
   161    commandOverride: []
vagrant@master:~$ nano values.yaml 
vagrant@master:~$ cat -n values.yaml | grep -A5 ancestors
    61    # -- Tetragon puts processes in an LRU cache. The cache is used to find ancestors
    62    # for subsequently exec'ed processes.
    63    processCacheSize: 65536
    64    # -- If you want to run Tetragon in debug mode change this value to true
    65    debug: false
    66    # -- JSON export filename. Set it to an empty string to disable JSON export altogether.
--
   153      # -- Comma-separated list of process event types to enable ancestors for.
   154      # Supported event types are: base, kprobe, tracepoint, uprobe, lsm. Unknown event types will be ignored.
   155      # Type "base" is required by all other supported event types for correct reference counting.
   156      # Set it to "" to disable ancestors completely.
   157      enabled: "base"
   158    # -- Set --btf option to explicitly specify an absolute path to a btf file. For advanced users only.
   159    btf: ""
   160    # -- Override the command. For advanced users only.
   161    commandOverride: []
vagrant@master:~$ helm install tetragon cilium/tetragon -n kube-system -f values.yaml
Error: INSTALLATION FAILED: unable to build kubernetes objects from release manifest: error validating "": error validating data: ValidationError(DaemonSet.spec.template.spec.containers[1].livenessProbe): unknown field "grpc" in io.k8s.api.core.v1.Probe
vagrant@master:~$ helm show chart cilium/tetragon | grep version
version: 1.5.0

[mtardy]

I think we might need your values.yaml file, I tried to install with

helm install tetragon cilium/tetragon -n kube-system --create-namespace   --set tetragon.enablePolicyDeny=true

and it worked