Kornilios Kourtis

policies with the same symbols are broken

1

Policies that use the same symbols do not currently work. Here's an example: ```yaml apiVersion: cilium.io/v1alpha1 kind: TracingPolicy metadata: name: "multiple-symbols" spec: kprobes: - call: __x64_sys_prctl args: - index: 0...

From https://github.com/cilium/tetragon/pull/2815 ``` ======================================================================================= ██████╗ ████████╗███████╗██╗ ██████╗ ███████╗███╗ ███╗ ██████╗ ██╔═══██╗╚══██╔══╝██╔════╝██║ ██╔══██╗██╔════╝████╗ ████║██╔═══██╗ ██║ ██║ ██║ █████╗ ██║ ██║ ██║█████╗ ██╔████╔██║██║ ██║ ██║ ██║ ██║ ██╔══╝ ██║ ██║ ██║██╔══╝ ██║╚██╔╝██║██║...

kprobes: support having the same argument twice

15

If we write a policy with the same argument twice, ```yaml apiVersion: cilium.io/v1alpha1 kind: TracingPolicy metadata: name: "sys-lseek" spec: kprobes: - call: "sys_lseek" syscall: true args: - index: 0 type:...

Ubuntu on ARM (https://github.com/cilium/tetragon/actions/runs/13673348873/job/38228265809): ``` logcapture.go:25: time="2025-03-05T10:10:05Z" level=info msg="Loaded generic kprobe program: /home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/bpf/objs/bpf_generic_kprobe_v61.o -> __arm64_sys_lseek" logcapture.go:25: time="2025-03-05T10:10:05Z" level=info msg="Loaded BPF maps and events for sensor successfully" maps="[Map{Name:fdinstall_map PinPath:mynamespace:lseek-test/generic_kprobe/fdinstall_map Owner:true} Map{Name:config_map...

This is an umbrella ☂ issue that tracks disabled tests. Tests are disabled if they frequently fail. ## vmtests - [ ] TestLoader: https://github.com/cilium/tetragon/pull/2615/commits/1e3d38e95b90d43f803668465a4a33adff2ffdac - [ ] TestTracepointLoadFormat https://github.com/cilium/tetragon/issues/1250 (abandoned)...

https://github.com/cilium/tetragon/pull/2776 Introduced pod association via cgroup ids. Currently, there are two ways that the cgidmap can be updated. By contacting the CRI: https://github.com/cilium/tetragon/blob/0bf690aed79a6e0cf4ff9199454eb25d3063fd96/pkg/cgidmap/cri.go#L105 Or, in the runtime hooks: https://github.com/cilium/tetragon/blob/0bf690aed79a6e0cf4ff9199454eb25d3063fd96/pkg/cgidmap/rthooks.go#L70 This...

``` --- FAIL: TestSkeletonBasic (30.00s) --- FAIL: TestSkeletonBasic/Run_Event_Checks (10.02s) --- FAIL: TestSkeletonBasic/Run_Event_Checks/Run_Event_Checks (10.02s) rpcchecker.go:171: Error Trace: /home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/tests/e2e/checker/rpcchecker.go:171 /home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/vendor/sigs.k8s.io/e2e-framework/pkg/env/env.go:422 /home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/vendor/sigs.k8s.io/e2e-framework/pkg/env/env.go:453 Error: Received unexpected error: failed to get events after 10 tries...

In some recent CI failures, it seemed that even though only one event was unmatched, the unmatched JSON output included all events. The only way to diagnose this was to...

The e2e labels test fails on the GH arm runner ("ubuntu-22.04-arm64"): > labels otel-demo-opensearch-0 0/1 Pending 0 15m As a result, the test fails: ``` d: PodChecker: PodLabels[app.kubernetes.io/component] (app.kubernetes.io/component=loadgenerator) check...

The policy is not installed for some reason: > I1022 09:25:28.287168 14427 rpcchecker.go:200] "Running event checks" checker="policyfilter-namespace-checker" > E1022 09:25:28.288184 14427 policyfilter_test.go:103] "failed to install policy" err="failed to get API...