SysDig agent fails to install on recently created IBM Cloud cluster

[seansund]

I created a new RedHat OpenShift cluster on IBM Cloud yesterday and attempted to install the Sysdig agent. The script failed because it couldn't find the default-icr-io pull secret for the IBM Container Registry.

It looks like some time over the weekend the strategy for naming pull secrets for the Container Registry changed. Previously, multiple pull secrets were created for each region with the prefix of default. Now a single pull secret named all-icr-io is created in the cluster.

Unfortunately it looks like the script looks for a particular secret with the name default-icr-io instead of doing some kind of pattern matching.

[powellquiring]

I just ran into this issue as well. Is there a way to up the priority on this? https://ibm-cloudplatform.slack.com/archives/GDGB25SP6/p1588006017117600

[PatrickDuncan]

Hey, we'll look into changing this soon. Not sure about the pattern matching, that seems a bit volatile. It could pick a secret without the necessary permissions or the pattern could change.

Thanks for opening a ticket

[powellquiring]

There is going to be live, on-line classes at the Think conference that use this. @PatrickDuncan can this be fixed tomorrow? Do you need help?

[PatrickDuncan]

@powellquiring Didn't realize that there's already a PR open for it https://github.com/draios/sysdig-cloud-scripts/pull/111

[PatrickDuncan]

@seansund Thanks for fixing this! It was merged, can you please close this issue?

[powellquiring]

Does the fix need to be deployed into production?

[PatrickDuncan]

@powellquiring It was deployed to IBM BIZ https://ibm.biz/install-sysdig-k8s-agent