Code Monkey home page Code Monkey logo

Comments (6)

Weltraumschaf avatar Weltraumschaf commented on June 3, 2024

Hi @kaz-33,

thanks for submitting this issue. We'll investigate this.

from securecodebox.

kaz-33 avatar kaz-33 commented on June 3, 2024

Same issue with "Scan" below the trace

I0304 15:57:30.789915       1 request.go:601] Waited for 1.037581017s due to client-side throttling, not priority and fairness, request: GET:https://10.43.0.1:443/apis/kyverno.io/v1beta1?timeout=32s
1.7095678525127919e+09	INFO	controller-runtime.metrics	Metrics server is starting to listen	{"addr": ":8080"}
1.709567852513952e+09	INFO	setup	starting manager
1.709567852521771e+09	INFO	Starting server	{"path": "/metrics", "kind": "metrics", "addr": "[::]:8080"}
1.709567852522336e+09	INFO	Starting server	{"kind": "health probe", "addr": "[::]:8081"}
I0304 15:57:32.623050       1 leaderelection.go:248] attempting to acquire leader lease securecodebox-system/e341d981.securecodebox.io...
I0304 15:57:32.695167       1 leaderelection.go:258] successfully acquired lease securecodebox-system/e341d981.securecodebox.io
1.7095678526956122e+09	INFO	Starting EventSource	{"controller": "scantype", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScanType", "source": "kind source: *v1.ScanType"}
1.7095678526957204e+09	INFO	Starting Controller	{"controller": "scantype", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScanType"}
1.7095678526957152e+09	INFO	Starting EventSource	{"controller": "scan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "Scan", "source": "kind source: *v1.Scan"}
1.7095678526958091e+09	INFO	Starting EventSource	{"controller": "scan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "Scan", "source": "kind source: *v1.Job"}
1.7095678526958377e+09	INFO	Starting Controller	{"controller": "scan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "Scan"}
1.7095678526956465e+09	INFO	Starting EventSource	{"controller": "scheduledscan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScheduledScan", "source": "kind source: *v1.ScheduledScan"}
1.7095678526958761e+09	INFO	Starting EventSource	{"controller": "scheduledscan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScheduledScan", "source": "kind source: *v1.Scan"}
1.7095678526959028e+09	INFO	Starting Controller	{"controller": "scheduledscan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScheduledScan"}
1.7095678526953866e+09	DEBUG	events	Normal	{"object": {"kind":"Lease","namespace":"securecodebox-system","name":"e341d981.securecodebox.io","uid":"eb3c1d39-2c38-409b-a4e3-5e364f7a450f","apiVersion":"coordination.k8s.io/v1","resourceVersion":"120204807"}, "reason": "LeaderElection", "message": "securecodebox-controller-manager-59bdd8c5b6-ph7xq_c79d0eaf-8376-4631-9104-899ca9e2031a became leader"}
1.7095678527975159e+09	INFO	Starting workers	{"controller": "scantype", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScanType", "worker count": 1}
1.7095678527974482e+09	INFO	Starting workers	{"controller": "scan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "Scan", "worker count": 1}
1.7095678527975001e+09	INFO	Starting workers	{"controller": "scheduledscan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "ScheduledScan", "worker count": 1}
1.7095682321622312e+09	INFO	controllers.execution.Scan	Matching ScanType Found	{"scan_init": "securecodebox-system/nmap-scanme.nmap.org1", "ScanType": "nmap"}
1.7095682322677379e+09	INFO	controllers.execution.Scan	Service Account doesn't exist creating now
1.7095682323993676e+09	INFO	controllers.execution.Scan	Role doesn't exist creating now
1.709568232541953e+09	INFO	controllers.execution.Scan	RoleBinding doesn't exist creating now
1.709568232648864e+09	INFO	controllers.execution.Scan	Configuring customCACerts for lurker	{"customCACertificate": "", "isConfigured": false}
1.7095682327015796e+09	INFO	KubeAPIWarningLogger	metadata.name: this is used in Pod names and hostnames, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]
1.7095682327016318e+09	INFO	KubeAPIWarningLogger	would violate PodSecurity "restricted:latest": unrestricted capabilities (containers "nmap", "lurker" must set securityContext.capabilities.drop=["ALL"]; container "nmap" must not include "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_RAW" in securityContext.capabilities.add), seccompProfile (pod or containers "nmap", "lurker" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")




1.7095686343675146e+09	INFO	controllers.execution.Scan	Matching ParseDefinition Found	{"scan_parse": "securecodebox-system/nmap-scanme.nmap.org1", "ParseDefinition": "nmap-xml"}
1.7095686343698142e+09	ERROR	controllers.execution.Scan	Failed to parse parser url expiration	{"error": "Cannot parse env variable: URL_EXPIRATION_PARSER"}
github.com/secureCodeBox/secureCodeBox/operator/controllers/execution/scans.(*ScanReconciler).Reconcile
	/workspace/controllers/execution/scans/scan_controller.go:102
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234
1.709568634400552e+09	INFO	Observed a panic in reconciler: Cannot parse env variable: URL_EXPIRATION_PARSER	{"controller": "scan", "controllerGroup": "execution.securecodebox.io", "controllerKind": "Scan", "scan": {"name":"nmap-scanme.nmap.org1","namespace":"securecodebox-system"}, "namespace": "securecodebox-system", "name": "nmap-scanme.nmap.org1", "reconcileID": "5a086c23-d86c-4410-b74a-4700679c1f0c"}
panic: Cannot parse env variable: URL_EXPIRATION_PARSER [recovered]
	panic: Cannot parse env variable: URL_EXPIRATION_PARSER

goroutine 579 [running]:
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile.func1()
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:118 +0x1f4
panic({0x15bfa80, 0xc000ff4580})
	/usr/local/go/src/runtime/panic.go:884 +0x212
github.com/secureCodeBox/secureCodeBox/operator/controllers/execution/scans.(*ScanReconciler).startParser(0xc0001668c0, 0xc000d3c600)
	/workspace/controllers/execution/scans/parse_reconciler.go:79 +0x299b
github.com/secureCodeBox/secureCodeBox/operator/controllers/execution/scans.(*ScanReconciler).Reconcile(0xc0001668c0, {0x1a3e318, 0xc000a30600}, {{{0xc000f507b0, 0x14}, {0xc000f507c8, 0x15}}})
	/workspace/controllers/execution/scans/scan_controller.go:102 +0x4c5
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile(0x1a3e270?, {0x1a3e318?, 0xc000a30600?}, {{{0xc000f507b0?, 0x16fef60?}, {0xc000f507c8?, 0x4045d4?}}})
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121 +0xc8
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler(0xc00034cfa0, {0x1a3e270, 0xc000a91f00}, {0x163b960?, 0xc0002b7e00?})
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320 +0x33c
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem(0xc00034cfa0, {0x1a3e270, 0xc000a91f00})
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273 +0x1d9
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2()
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234 +0x85
created by sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:230 +0x333

Thx for your support

from securecodebox.

kaz-33 avatar kaz-33 commented on June 3, 2024

the issue come when i tri to add this values in my values.yaml

presignedUrlExpirationTimes:
  scanners: "12h"
  parsers: "1h"
  hooks: "1h"

from securecodebox.

J12934 avatar J12934 commented on June 3, 2024

can you check inside the pod / inside the applied kubernetes resources if helm (or something else) evauluates these values to something else? 12h / 1h look valid to me

from securecodebox.

kaz-33 avatar kaz-33 commented on June 3, 2024

It seems, but I'm not 100% sure, that the problem comes from the single quotation mark around the number. With double quotation marks, I can't find the problem.

from securecodebox.

Weltraumschaf avatar Weltraumschaf commented on June 3, 2024

Hi @kaz-33,

it should work also with single quotes:

presignedUrlExpirationTimes:
  scanners: '12h'
  parsers: '1h'
  hooks: '1h'

Even without quotes it should work:

presignedUrlExpirationTimes:
  scanners: 12h
  parsers: 1h
  hooks: 1h

from securecodebox.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.