[Helm] Missing CAP_BPF in retina-agent Daemonset spec #2236

Activity

1. github-project-automation

   added this to Retina Triage Boardon Apr 23, 2026
2. nddq commented on Apr 23, 2026

   

   Quang Nguyen (nddq)

   on Apr 23, 2026

   Member

   More actions

   AFAIK, linuxutils does not require CAP_BPF, and SYS_ADMIN should already covers BPF permissions for the plugins. What exactly is the issue you were seeing here, and did you verify that explicitly adding CAP_BPF resolved those issues?
3. ohookins commented on Apr 23, 2026

   

   Oliver Hookins (ohookins)

   on Apr 23, 2026

   Author

   More actions

   Quang Nguyen (@nddq) you're absolutely correct, and I think I made a number of changes that unfortunately made it look like this fixed the problem when it didn't. Here's the error I'm getting:

   retina ts=2026-04-23T23:02:44.403Z level=error caller=linuxutil/ethtool_stats_linux.go:105 msg="Error while retrieving stats:" ifacename=eni07152960da9 error="
   failed to retrieve interface stats: no such device" errorVerbose="no such device\nfailed to retrieve interface stats\ngithub.com/microsoft/retina/pkg/plugin/li
   nuxutil.(*CachedEthtool).StatsWithBuffer\n\t/go/src/github.com/microsoft/retina/pkg/plugin/linuxutil/ethtool_handle_linux.go:42\ngithub.com/microsoft/retina/pk
   g/plugin/linuxutil.(*EthtoolReader).readInterfaceStats\n\t/go/src/github.com/microsoft/retina/pkg/plugin/linuxutil/ethtool_stats_linux.go:98\ngithub.com/micros
   oft/retina/pkg/plugin/linuxutil.(*EthtoolReader).readAndUpdate\n\t/go/src/github.com/microsoft/retina/pkg/plugin/linuxutil/ethtool_stats_linux.go:67\ngithub.co
   m/microsoft/retina/pkg/plugin/linuxutil.(*linuxUtil).run.func2\n\t/go/src/github.com/microsoft/retina/pkg/plugin/linuxutil/linuxutil_linux.go:122\nruntime.goex
   it\n\t/usr/local/go/src/runtime/asm_amd64.s:1771"
   

   I get this for every virtual interface on the instance.