Skip to content

Prevent agents (PEM + kelvin) from accessing cgroup directories they don't have permission for#2333

Merged
ddelnano merged 2 commits intomainfrom
ddelnano/skip-cgroups-permission-denied
Mar 16, 2026
Merged

Prevent agents (PEM + kelvin) from accessing cgroup directories they don't have permission for#2333
ddelnano merged 2 commits intomainfrom
ddelnano/skip-cgroups-permission-denied

Conversation

@ddelnano
Copy link
Member

@ddelnano ddelnano commented Mar 14, 2026

Summary: Prevent agents (PEM + kelvin) from accessing cgroup directories they don't have permission for

Relevant Issues: Closes #2332

Type of change: /kind bugfix

Test Plan: End user validated the fix and new unit tests

Changelog Message: Prevents a crash where a vizier's kelvin pod would segfault due to a permission denied error.

@ddelnano ddelnano marked this pull request as ready for review March 15, 2026 21:10
@ddelnano ddelnano requested a review from a team as a code owner March 15, 2026 21:10
Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
(cherry picked from commit 6dd0f9a)
(cherry picked from commit 64e5a72)
Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
@ddelnano ddelnano force-pushed the ddelnano/skip-cgroups-permission-denied branch from 7ec9fc9 to 427fc6e Compare March 16, 2026 03:05
@ddelnano ddelnano merged commit 5bf71d8 into main Mar 16, 2026
47 of 51 checks passed
@ddelnano ddelnano deleted the ddelnano/skip-cgroups-permission-denied branch March 16, 2026 12:32
k8sstormcenter-buildbot pushed a commit to k8sstormcenter/pixie that referenced this pull request Mar 16, 2026
k8sstormcenter-buildbot pushed a commit to k8sstormcenter/pixie that referenced this pull request Mar 17, 2026
k8sstormcenter-buildbot pushed a commit to k8sstormcenter/pixie that referenced this pull request Mar 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Kelvin crashes on cgroup directories it can't access

2 participants