docs: add known issue for cni folder issue #5596

lennessyy · 2025-01-29T23:41:09Z

Describe the Change

This PR adds a known issue regarding CNI folder permissions in 4.5

Changed Pages

💻 agent-mode-deployments-cni-folder-permission-issues

Jira Tickets

🎫 Jira Ticket

Backports

Can this PR be backported?

Yes. Remember to add the relevant backport labels to your PR.
No. Please leave a short comment below about why this PR cannot be backported.

netlify · 2025-01-29T23:41:45Z

✅ Deploy Preview for docs-spectrocloud ready!

Name	Link
🔨 Latest commit	`fa4029b`
🔍 Latest deploy log	https://app.netlify.com/sites/docs-spectrocloud/deploys/679d44e8b9aca1000803dd50
😎 Deploy Preview	https://deploy-preview-5596--docs-spectrocloud.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

docs/docs-content/troubleshooting/edge.md

benradstone

Approved with one suggestion.

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

rrpolanco · 2025-01-31T20:43:47Z

docs/docs-content/troubleshooting/edge.md

+Agent mode clusters that use PKX-E as the Kubernetes layer have the contents of the `/opt/cni/bin` folder set in
+correctly. This prevents the CNI from operating.


This only affects CNI providers that do not run as root such as Cilium. For example, using Calico CNI does not require this workaround.

Co-authored-by: Rafael Polanco <[email protected]> Co-authored-by: Ben Radstone <[email protected]>

…into DOC-1639

github-actions · 2025-01-31T21:48:08Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

@@ -93,68 +93,212 @@ Palette. You will then create a cluster profile and use the registered host to d
  :::

  - If installing the FIPS version of Agent Mode on a Rocky Linux edge host, you must configure your SELinux policies to
-    grant rsync the required host permissions. Follow the process below to apply the necessary configurations before
-    installing Agent Mode.
+    grant rsync the required host permissions and ensure you enable cgroup V2.


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'rsync'?

github-actions · 2025-01-31T21:48:08Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

@@ -93,68 +93,212 @@ Palette. You will then create a cluster profile and use the registered host to d
  :::

  - If installing the FIPS version of Agent Mode on a Rocky Linux edge host, you must configure your SELinux policies to
-    grant rsync the required host permissions. Follow the process below to apply the necessary configurations before
-    installing Agent Mode.
+    grant rsync the required host permissions and ensure you enable cgroup V2.


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'cgroup'?

github-actions · 2025-01-31T21:48:08Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md


-  <br />
+    If you are using Cilium and have firewalld enabled, you must also configure the appropriate firewalld rules. Follow


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'firewalld'?

github-actions · 2025-01-31T21:48:08Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md


-  <br />
+    If you are using Cilium and have firewalld enabled, you must also configure the appropriate firewalld rules. Follow


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'firewalld'?

github-actions · 2025-01-31T21:48:08Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

+
+    ### Configure rsync
+
+    1. Enable SELinux to allow full rsync access.


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'SELinux'?

github-actions · 2025-01-31T21:48:10Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

+
+    ### Configure firewalld (Cilium Only)
+
+    12. (Optional) If you are using Cilium and have firewalld enabled, put the the following commands into a shell


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'firewalld'?

github-actions · 2025-01-31T21:48:10Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md

+
+    ### Configure firewalld (Cilium Only)
+
+    12. (Optional) If you are using Cilium and have firewalld enabled, put the the following commands into a shell


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Repetition] 'the' is repeated!

github-actions · 2025-01-31T21:48:10Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md


-  6. Install the compiled policy module.
+    13. Execute the script with the name of the firewalld zone. For example, the following script sets the rules in the


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Terms] Use 'execute' instead of 'Execute'.

github-actions · 2025-01-31T21:48:10Z

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md


-  6. Install the compiled policy module.
+    13. Execute the script with the name of the firewalld zone. For example, the following script sets the rules in the


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'firewalld'?

github-actions · 2025-01-31T21:48:10Z

docs/docs-content/troubleshooting/edge.md

+## Scenario - Agent Mode Deployments CNI Folder Permission Issues
+
+Agent mode clusters that use PKX-E as the Kubernetes layer have the contents of the `/opt/cni/bin` folder set
+incorrectly. This prevents the CNI that do not run as root, such as Cilium, from operating.


🚫 [vale] _{reported by reviewdog 🐶}
[spectrocloud-docs-internal.ableism] Avoid using ableism terms. Use 'issue' instead of 'run'.

docs: add known issue for cni folder issue

89991d1

lennessyy marked this pull request as ready for review January 29, 2025 23:41

lennessyy requested a review from a team as a code owner January 29, 2025 23:41

lennessyy requested review from karl-cardenas-coding, addetz and benradstone January 29, 2025 23:41

github-actions bot reviewed Jan 29, 2025

View reviewed changes

lennessyy commented Jan 30, 2025

View reviewed changes

docs/docs-content/troubleshooting/edge.md Outdated Show resolved Hide resolved

lennessyy commented Jan 30, 2025

View reviewed changes

docs/docs-content/troubleshooting/edge.md Outdated Show resolved Hide resolved

Apply suggestions from code review

c3ec6cf

lennessyy requested a review from rrpolanco January 30, 2025 18:13

benradstone reviewed Jan 30, 2025

View reviewed changes

docs/docs-content/troubleshooting/edge.md Outdated Show resolved Hide resolved

benradstone approved these changes Jan 30, 2025

View reviewed changes

docs: add firewalld commands

bafe482

rrpolanco reviewed Jan 31, 2025

View reviewed changes

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md Outdated Show resolved Hide resolved

rrpolanco reviewed Jan 31, 2025

View reviewed changes

docs/docs-content/deployment-modes/agent-mode/install-agent-host.md Outdated Show resolved Hide resolved

rrpolanco reviewed Jan 31, 2025

View reviewed changes

lennessyy and others added 5 commits January 31, 2025 12:56

Apply suggestions from code review

035e32e

Co-authored-by: Rafael Polanco <[email protected]> Co-authored-by: Ben Radstone <[email protected]>

docs: incorporate feedback

6eb4f3d

Merge branch 'DOC-1639' of https://github.com/spectrocloud/librarium …

4ef9431

…into DOC-1639

docs: indentation

4c28875

Merge branch 'master' into DOC-1639

fa4029b

github-actions bot reviewed Jan 31, 2025

View reviewed changes

lennessyy enabled auto-merge (squash) January 31, 2025 21:51

lennessyy merged commit 8e024ba into master Jan 31, 2025
14 of 15 checks passed

lennessyy deleted the DOC-1639 branch January 31, 2025 21:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

docs: add known issue for cni folder issue #5596

docs: add known issue for cni folder issue #5596

lennessyy commented Jan 29, 2025 •

edited

Loading

netlify bot commented Jan 29, 2025 •

edited

Loading

benradstone left a comment

rrpolanco Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

github-actions bot Jan 31, 2025

		Agent mode clusters that use PKX-E as the Kubernetes layer have the contents of the `/opt/cni/bin` folder set in
		correctly. This prevents the CNI from operating.


		<br />
		If you are using Cilium and have firewalld enabled, you must also configure the appropriate firewalld rules. Follow


		### Configure rsync

		1. Enable SELinux to allow full rsync access.


		### Configure firewalld (Cilium Only)

		12. (Optional) If you are using Cilium and have firewalld enabled, put the the following commands into a shell


		6. Install the compiled policy module.
		13. Execute the script with the name of the firewalld zone. For example, the following script sets the rules in the

docs: add known issue for cni folder issue #5596

docs: add known issue for cni folder issue #5596

Conversation

lennessyy commented Jan 29, 2025 • edited Loading

Describe the Change

Changed Pages

Jira Tickets

Backports

netlify bot commented Jan 29, 2025 • edited Loading

✅ Deploy Preview for docs-spectrocloud ready!

benradstone left a comment

Choose a reason for hiding this comment

rrpolanco Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

github-actions bot Jan 31, 2025

Choose a reason for hiding this comment

lennessyy commented Jan 29, 2025 •

edited

Loading

netlify bot commented Jan 29, 2025 •

edited

Loading