-
Notifications
You must be signed in to change notification settings - Fork 102
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Admission controller port missing from cluster agent deployment #962
Comments
Turns out I wasn't allowing port 8000 traffic from the control plane as mentioned here. I'm still surprised it works without exposing the port on the cluster agent though, given that it doesn't seem to be using host networking. |
Hi @jalaziz , thanks for your question. The |
Output of the info page (if this is a bug)
Describe what happened:
I recently noticed that none of my service pods were starting after installing the Datadog Operator. After some investigation, I realized there was an issue with the admission controller. In particular, I found the following in the k8s apiserver logs:
Looking into the configuration, I noticed the the admission service was targeting port 8000 on the cluster agents, but port 8000 was not exposed on the cluster agent deployment.
Looking through the codebase, it doesn't appear that the operator correctly exposes the target port on any pods.
Describe what you expected:
I expected the admission webhook to work.
The helm chart seems to correctly expose the port: https://github.com/DataDog/helm-charts/blob/cdf0acf8aa46c1884ef7978bfad17c49192caf5c/charts/datadog/templates/cluster-agent-deployment.yaml#L144-L148
Steps to reproduce the issue:
Simply run the operator with the cluster agent and admission webhooks enabled (which I believe is the default configuration)
Additional environment details (Operating System, Cloud provider, etc):
The text was updated successfully, but these errors were encountered: