This message was deleted.
# neuvector-security
a
This message was deleted.
h
What version of NV does it try to deploy? Anything in your cluster events? are you deploying on RKE1 cluster from same Rancher UI -> Apps ?
Personally, I've preferred deploying NV using helm chart https://github.com/neuvector/neuvector-helm
t
do you have longhorn deployed to that cluster?
l
I do have longhorn on the cluster, and that's where it allocated the PVC. Looks like the volume is created, but the pods don't ever get past the init state. This is the latest neuvector available app I had (104.0.4+up2.8.4), and neuvector itself is 5.4.2
t
I would delete it from the app catalog and use the chart itself. the catalog is usually a few months behind. did you
kubectl describe
the pod to see whats up?
l
I'm looking now. It successfully assigned the pod to a node, but it's sitting at an incomplete status of init prime-config-container
and that container is sitting at PodInitializing
ah, here comes an error attach failed for volume
Copy code
timed out waiting for external-attacher of <http://driver.longhorn.io|driver.longhorn.io> CSI driver to attach volume
which I don't quite understand as longhorn is working for other tasks as far as I can tell.
guess I'll dig into longhorn issues
seems like it creates the volumes and stays detached. If I manually attach it, it does, but the pod still doesn't progress.
t
are all the longhorn pods ok? You could modify the app to NOT use persistent storage.
l
right, and that's what I had been doing. Do you know what gets lost if I don't have persistent storage with neuvector?
t
all the settings and data.
l
So, I'd obviously rather have it than not.
t
makes sense. but NV as never run yet then you can test it.
l
I think I figured out how to get this working if anyone is interested. It has to do most likely with the default settings of the storageclass as to whether or not the PVC will be created in RWX mode or not. I worked around that issue by pre-creating the PVC neuvector-data and making sure it was set to Many-node read-write. Then instead of checking the box in the Ranch App for a PVC, I edited the yaml and set these options:
Copy code
pvc:
    accessModes:
      - ReadWriteMany
    capacity: 1Gi
    enabled: true
    existingClaim: neuvector-data
    storageClass: longhorn
This then seemed to deploy ok on RKE1 and RKE2 clusters.
🎉 1