Pod Requiring Privilege in order to run cndpfwd application in Kubernetes.

[intel]

Pod Requiring Privilege in order to run cndpfwd application in Kubernetes.

[maryamtahhan]

What is the Kernel on the host? Prior to kernel 5.19, all BPF sys calls required CAP_BPF, which are used to access maps shared between the BFP program and the userspace program. In kernel 5.19, a change went in that only requires CAP_BPF for map creation (BPF_MAP_CREATE) and loading programs (BPF_PROG_LOAD).

What is the value of kernel.unprivileged_bpf_disabled on your OS?

Is this a KinD cluster or something else?

[manish22m2110]

Okay, so I am using kernel version 5.15.0-25-generic. The value of kernel.unprivileged_bpf_disabled is 2. I guess thats why I was facing the above error. I will recheck by upgrading to kernel version 5.19.

update: I tried by setting the unprivileged_bpf_disabled flag and it works.

Thank you.

[maryamtahhan]

Yeah so for Kernel 5.15.0-25-generic you would need CAP_BPF...
Please do try the 5.19 Kernel and let me know if you still have issues.