Skip to content

Introduce image.otelcol.fips which set the appropriate repo/image and skips migrate-checkpoint if needed #1756

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

dloucasfx
Copy link
Contributor

Description:
FIPS images do not support migratecheckpoint to migrate checkpoints from fluentd when logsEnabled is set , this causes the pod to get into a crashloop.

create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "/migratecheckpoint": stat /migratecheckpoint: no such file or directory: unknown

The fix introduces a new image.otelcol.fips option, which will be used to set the default repo/image and skips migratecheckpoint init container if needed.

The default repo logic is moved into splunk-otel-collector.image.otelcol helper function so user can still set a custom repo if needed.

@dloucasfx dloucasfx requested review from a team as code owners April 8, 2025 15:23
… skips migrate-checkpoint if needed

Signed-off-by: Dani Louca <[email protected]>
# The name of the component, or a single word describing the area of concern, (e.g. agent, clusterReceiver, gateway, operator, chart, other)
component: all
# A brief description of the change. Surround your text with quotes ("") if it needs to start with a backtick (`).
note: Introduce a new option `image.otelcol.fips`, when set to true, it sets the appropriate repo/image and skips `migrate-checkpoint` when log is enabled
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are we officially rolling out our FIPs image? I am asking cause we have previously closed similarly PRs and have been waiting for green light from product.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was not aware of this PR, I wonder if this is the same user who reported it internally.
The workaround provided in the linked PR is not ideal as you will loose some functionalities by skipping all init containers.
As for the fips image support, this implies https://github.com/signalfx/splunk-otel-collector-chart/blob/main/helm-charts/splunk-otel-collector/values.yaml#L976 that it's supported.

@jinja2
Copy link
Collaborator

jinja2 commented Apr 8, 2025

The histogram tests are failing due to a flaky coredns metric coredns_cache_hits_total. I'll tweak the tests, shouldn't be a blocker for this PR.

@dloucasfx
Copy link
Contributor Author

We decided another approach, see #1757

@dloucasfx dloucasfx closed this Apr 8, 2025
@github-actions github-actions bot locked and limited conversation to collaborators Apr 8, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants