Skip to content

k8s: Add comment around hostUsers for Universal Profiling deployments#9847

Merged
florianl merged 2 commits intomainfrom
issue-6292
Sep 11, 2025
Merged

k8s: Add comment around hostUsers for Universal Profiling deployments#9847
florianl merged 2 commits intomainfrom
issue-6292

Conversation

@florianl
Copy link
Copy Markdown
Member

What does this PR do?

In order to set procMount to Unmasked, the additional setting hostUsers net to be set to false.

Why is it important?

Fix the following error when using Universal Profiling:

The DaemonSet "elastic-agent" is invalid: spec.template.spec.containers[0].securityContext.procMount: Invalid value: "Unmasked": `hostUsers` must be false to use `Unmasked

In order to set procMount to Unmasked, the additional setting hostUsers net to be set to false.

Signed-off-by: Florian Lehner <florian.lehner@elastic.co>
@florianl florianl requested a review from a team as a code owner September 10, 2025 08:23
@florianl florianl added the enhancement New feature or request label Sep 10, 2025
@florianl florianl enabled auto-merge (squash) September 10, 2025 08:25
@pierrehilbert pierrehilbert added the Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team label Sep 10, 2025
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/elastic-agent-control-plane (Team:Elastic-Agent-Control-Plane)

Signed-off-by: Florian Lehner <florian.lehner@elastic.co>
@elastic-sonarqube
Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@elasticmachine
Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

History

cc @florianl

Copy link
Copy Markdown
Contributor

@pkoutsovasilis pkoutsovasilis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this LGTM, however it does change only kustomize and not the elastic-agent helm chart which is now the recommended way to handle elastic-agent in k8s. @florianl @ebeahan I believe that it is worth having a built-in integration for universal-profiling, as we do today for kubernetes, that takes care of any k8s configuration knobs when the user sets it as enabled: true

PS: @ebeahan @cmacknz @swiatekm at some point let's discuss the proper deprecation of kustomize

@florianl florianl merged commit 1f80b49 into main Sep 11, 2025
23 checks passed
@florianl florianl deleted the issue-6292 branch September 11, 2025 08:38
v1v added a commit that referenced this pull request Sep 16, 2025
* upstream: (26 commits)
  fix: ensure EDOT subprocess shuts down gracefully on agent termination (#9886)
  [main][Automation] Update versions (#9976)
  Add Collector reference docs and automation (#9953)
  [beatreceivers] Integrate beatsauthextension (#9257)
  [main][Automation] Update versions (#9941)
  Update OTel components to v0.132.0/v1.38.0 (#9954)
  Enhancement/5235 wrap errors when marking upgrade (#9366)
  Mount Go build cache into crossbuild container (#9094)
  Liveness agent state (#9673)
  [main][Automation] Bump VM Image version to 1757725254 (#9942)
  Enhancement/5235 correctly wrap errors from copyActionDir and copyRunDirectory (#9349)
  [main][Automation] Update elastic/beats to afc53c0479ac (#9874)
  Add -coverpkg option when running unit test to calculate coverage across packages (#9913)
  Cache binaries downloaded for packaging locally (#9133)
  [main][Automation] Update versions (#9897)
  Disable flaky test TestBeatsReceiverLogs (#9891)
  Allow overriding AGENT_PACKAGE_VERSION and MANIFEST_URL when USE_PACKAGE_VERSION=true (#9864)
  add ingest-docs team as CODEOWNERS for release notes and docset.yml (#9865)
  fix: correct spelling of 'output' in various templates and monitoring code (#9827)
  k8s: Add comment around hostUsers for Universal Profiling deployments (#9847)
  ...
intxgo pushed a commit to intxgo/elastic-agent that referenced this pull request Sep 24, 2025
…elastic#9847)

In order to set procMount to Unmasked, the additional setting hostUsers net to be set to false.

Signed-off-by: Florian Lehner <florian.lehner@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-skip enhancement New feature or request skip-changelog Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants