This message was deleted.

Ok, I'm getting some where, I see this inside the agent logs:

E1002 23:51:28.878328      87 dynamic_cafile_content.go:169] "Failed to watch CA file, will retry later" err="error creating fsnotify watcher: too many open files"

But this baffling because the max is very high inside the container

~ # cat /proc/sys/fs/inotify/max_user_watches
1048576

Yet the number watches seems to be 7:

~ # find /proc/*/fd -lname 'anon_inode:inotify' -print 2>/dev/null | wc -l
7