cis-operator icon indicating copy to clipboard operation
cis-operator copied to clipboard

Published 20 hours ago • verified publisher icon rancher

cis-operator doesn't support Kubernetes cluster managed by Scaleway

Open nbisson opened this issue 3 years ago • 8 comments

Hi, cis-operator works only with providers declared here : https://github.com/rancher/kubernetes-provider-detector/tree/master/providers Having a Kubernetes cluster managed by Scaleway, my cluster can't launch cis-operator. When executing, getting this error :

time="2021-07-23T09:33:28Z" level=info msg="Starting CIS-Operator"
time="2021-07-23T09:33:29Z" level=fatal msg="Error building controller: unknown provider"

Shouldn't the start be allowed even if the detection of the provider fails ?

Thank's.

nbisson avatar Jul 23 '21 09:07 nbisson

Any news about this issue?

xom4ek avatar Oct 27 '21 09:10 xom4ek

Found easy way for start cis-operator - just add label to any node in cluster

k label node MYNODE kubernetes.azure.com/cluster=""

Operator start think about this cluster "aks here" but its not a problem for start scaning and configuration profiles

xom4ek avatar Oct 27 '21 12:10 xom4ek

Same here using OVHCloud managed Kubernetes cluster. Thanks for the trick @xom4ek !

manicole avatar Mar 03 '22 14:03 manicole

Hi @manicole !

What label did you put on OVH nodes ?

Thanks !

Raph0773 avatar Mar 30 '22 10:03 Raph0773

I'm getting this problem on a self hosted cluster (kubespray)

belaw avatar Aug 15 '22 13:08 belaw

I'm getting this problem on a self hosted cluster (kubespray)

Hi @belaw! just applying @xom4ek fix solved the issue

k label node MYNODE kubernetes.azure.com/cluster=""

c-romeo avatar Aug 21 '22 20:08 c-romeo

I'm getting this problem on a self hosted cluster (kubespray)

Hi @belaw! just applying @xom4ek fix solved the issue

k label node MYNODE kubernetes.azure.com/cluster=""

Hi @C-Romeo, thanks, I should have mentioned that I already figured that out 😁 and I just wanted to push this issue because the node label makes the cluster look like a cloud based cluster when you view it in Rancher.

belaw avatar Aug 22 '22 18:08 belaw

The question on this one is, "do we want to implement a programatic version of the work around so that the operator doesn't fail when provider is unknown?" this issue was release noted (i'm verifying the veracity of that statement ;) ), and the workaround noted resolves the issue. https://github.com/rancher/cis-operator/issues/103#issuecomment-1222771391

ronhorton avatar Jan 04 '23 16:01 ronhorton