Linkerd2-cni: After upgrading to v30.8.5 cni pod crashes and can not be restarted

I have upgraded linkerd-crds and linkerd-control-plane to v2.13.7 . To get the compatible version of linkerd2-cni with other components , i have also upgraded it to v30.8.5 . But linkerd-cni-29zxr pod gives error and crashes. From pod logs :
`/host/opt/cni/bin is non-writeable, failure

Stream closed EOF for linkerd-cni/linkerd-cni-29zxr (install-cni)`

Hi, can you please provide more details like your k8s version and whether you’re using a cloud provider?

Hi, K8s v1.23.4, OTC cloud.

As shown in these examples, different providers place their CNI binaries in different places, that you can specify via the destCNIBinDir settings for the linkerd2-cni chart. We have no experience with OTC, so maybe you can help us find where those dirs are, searching for “cni” through the node’s file system, or asking your provider how they configured k8s , in particular the kubelet flag --cni-bin-dir value that was used.

Hello again, the CNI binary in OTC Nodes placed also in /opt/cni/bin , it was not the reason of the issue. After configuring the DaemonSet with SecComp Unconfined , the update worked. Thank you for your Reply :+1:

1 Like