Skip to content

Revert PR #2618#2680

Merged
achrefbensaad merged 1 commit into
kubearmor:mainfrom
Aryan-sharma11:revert-subdomain-matching
Jun 19, 2026
Merged

Revert PR #2618#2680
achrefbensaad merged 1 commit into
kubearmor:mainfrom
Aryan-sharma11:revert-subdomain-matching

Conversation

@Aryan-sharma11

@Aryan-sharma11 Aryan-sharma11 commented Jun 18, 2026

Copy link
Copy Markdown
Member

Purpose of PR?:

Reverting PR #2618 due to verifier error being observed in kernel 6.17

BPF program is too large. Processed 1000001 insn
	processed 1000001 insns (limit 1000000) max_states_per_insn 12 total_states 76241 peak_states 1876 mark_read 293
github.com/kubearmor/KubeArmor/KubeArmor/log.Err
	/home/aryan/Documents/KubeArmor/KubeArmor/log/logger.go:103
github.com/kubearmor/KubeArmor/KubeArmor/feeder.(*Feeder).Errf
	/home/aryan/Documents/KubeArmor/KubeArmor/feeder/feeder.go:501
github.com/kubearmor/KubeArmor/KubeArmor/enforcer/bpflsm.NewBPFEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/bpflsm/enforcer.go:142
github.com/kubearmor/KubeArmor/KubeArmor/enforcer.selectLsm
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:106
github.com/kubearmor/KubeArmor/KubeArmor/enforcer.NewRuntimeEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:175
github.com/kubearmor/KubeArmor/KubeArmor/core.(*KubeArmorDaemon).InitRuntimeEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/core/kubeArmor.go:342
github.com/kubearmor/KubeArmor/KubeArmor/core.KubeArmor
	/home/aryan/Documents/KubeArmor/KubeArmor/core/kubeArmor.go:696
main.main
	/home/aryan/Documents/KubeArmor/KubeArmor/main.go:74
runtime.main
	/home/aryan/go/pkg/mod/golang.org/[email protected]/src/runtime/proc.go:290
2026-06-15 11:09:05.692101	ERROR	error loading BPF LSM objects: field EnforceDns: program enforce_dns: load program: argument list too long: BPF program is too large. Processed 1000001 insn (3648 line(s) omitted)
github.com/kubearmor/KubeArmor/KubeArmor/log.Err
	/home/aryan/Documents/KubeArmor/KubeArmor/log/logger.go:103
github.com/kubearmor/KubeArmor/KubeArmor/feeder.(*Feeder).Errf
	/home/aryan/Documents/KubeArmor/KubeArmor/feeder/feeder.go:501
github.com/kubearmor/KubeArmor/KubeArmor/enforcer/bpflsm.NewBPFEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/bpflsm/enforcer.go:144
github.com/kubearmor/KubeArmor/KubeArmor/enforcer.selectLsm
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:106
github.com/kubearmor/KubeArmor/KubeArmor/enforcer.NewRuntimeEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:175
github.com/kubearmor/KubeArmor/KubeArmor/core.(*KubeArmorDaemon).InitRuntimeEnforcer
	/home/aryan/Documents/KubeArmor/KubeArmor/core/kubeArmor.go:342
github.com/kubearmor/KubeArmor/KubeArmor/core.KubeArmor
	/home/aryan/Documents/KubeArmor/KubeArmor/core/kubeArmor.go:696
main.main
	/home/aryan/Documents/KubeArmor/KubeArmor/main.go:74
runtime.main
	/home/aryan/go/pkg/mod/golang.org/[email protected]/src/runtime/proc.go:290
2026-06-15 11:09:05.692131	INFO	Error Initialising BPF-LSM Enforcer, Cleaning Up
2026-06-15 11:09:05.692206	INFO	Destroyed BPF-LSM Enforcer

Signed-off-by: Aryan-sharma11 <[email protected]>
@Aryan-sharma11 Aryan-sharma11 force-pushed the revert-subdomain-matching branch from 683e11b to 3452598 Compare June 18, 2026 09:49
@achrefbensaad achrefbensaad merged commit 3b4021d into kubearmor:main Jun 19, 2026
19 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants